Hey y’all!

I am after the colelctive expertise of this fantastic community. My family and i are moving overseas for a year for a pacific adventure, which leaves my hosting setup in a bind. We will be renting out our house and i will need to move all of my ‘servers’ (read laptop and NAS) out.

All of my services are in docker.

My main services that i MUST keep are:

  • Immich
    • 600Gb or so
    • very important as we will be taking a HEAP of photos.
  • paperless
  • vaultwarden
  • custom location tracking service
  • radicale

I would also like to make it so that all of my media is still available, but i may need to get a set up at a friends house. I have jellyfin plus a bunch of *arr’s

I was thinking a mix between at a mates house and a cloud server.

any thoughts?

edit: a lot of my services are exposed publicly, via Nginx proxy manager.

  • Admiral Patrick@dubvee.orgEnglish
    8·
    8 months ago

    Are any of your services public facing? If so, you might want to make the VPS your reverse proxy and VPN server and have your stack at your friend’s house connect to the cloud server via VPN. The reverse proxy on the VPS would connect back over the VPN to the equipment at your friend’s house.

    This would prevent your friend from having to open ports in their router and from exposing their IP to the world (beyond their normal traffic, that is).

    Plus, it would allow you to VPN-in to manage as well as have a “kill switch” should you need it (cyberattack, etc)

    I would not run any of the *arrs on a network that is not yours (even if you have them routed through a VPN). It puts a liability on your friend and may eat up their bandwidth.

    And definitely make sure your friend knows what they’ll be hosting for you and how it may impact their network.

    • palitu@aussie.zoneOPEnglish
      4·
      8 months ago

      Are any of your services public facing?

      Yes. i think that is like a “bastion” server, or something like that. good idea. I expect that i can get more-or-less free VPS, and just run the NPM and tailscale or something there.

      I would not run any of the *arrs on a network that is not yours

      Good thought, i dont think i would need it whilst i am away anyway.

      And definitely make sure your friend knows

      yep, responsible hosting :D

      thanks for the thoughts.>

    • atzanteol@sh.itjust.worksEnglish
      11·
      8 months ago

      This would prevent your friend from having to open ports in their router and from exposing their IP to the world (beyond their normal traffic, that is).

      Their IP address is already “exposed to the world.” I keep seeing people recommending this pattern in this community for the same reason. But I genuinely don’t understand it. It sounds like one of those VPN ads frankly.

      Your IP address is not private.

      Frankly I would mothball the servers and move everything to the cloud rather than use a friend’s resources. You retain control over the environment and don’t need to worry about somebody unplugging your computer to vacuum.

      • Admiral Patrick@dubvee.orgEnglish
        2·
        8 months ago

        Their IP address is already “exposed to the world.” I keep seeing people recommending this pattern in this community for the same reason. But I genuinely don’t understand it. It sounds like one of those VPN ads frankly.

        Your IP address is not private.

        I did state “beyond their normal traffic”. And you do realize there’s a significant difference between exposing your IP as a client and exposing your IP as one that has servers hosted behind it, right? It’s not about protecting that or keeping it secret. It’s about not putting a target on their friend’s IP address for all the bots and script kiddies to hit.

        • atzanteol@sh.itjust.worksEnglish
          1·
          8 months ago

          And you do realize there’s a significant difference between exposing your IP as a client and exposing your IP as one that has servers hosted behind it, right?

          No, there isn’t. Bots scan indiscriminately. And script kiddies will still attack your servers running in their network, just via your proxy.