Greetings,
my current ISP refuses to provide me a static IP and they also blocks incoming connection to my ipv6 so I can’t host services on just ipv6 too. I will be changing my ISP when the plan expires.
without public IP I can host my own IRC bouncer but I would like to know what else can I self host? Thanks in advance!
You must log in or register to comment.
Anything. You don’t need any services to be public unless you choose for them to be.
actually I was thinking about hosting my own fediverse service to own my data but I can’t do that without a static public IP and domain name.
As long as you’re not behind CGNAT, you can use a dynamic DNS provider (like duckdns.org) and its web API to keep a record pointed at your IP. If you’re behind CGNAT, Tailscale also has a service (Tailscale Funnel) that can expose an internal service to the internet.
You could also pay for a small VPS with a static IP, and set up a Wireguard tunnel to your home server and an HTTPS proxy to forward traffic through the tunnel.
Also, just in general, use Tailscale. It’s serious black magic fuckery on the firewall.
Yeah I am behind CGNAT so I guess I have to use either Tailscale or wireguard as other users also suggested.
Thank you for the reply!
Just to chip in, cloudflare tunnels are a thing and also transverse CGNAT. Or you could use LocalXPosed, and other sevices like that.
I tried using DuckDNS for a while for DDNS, but noticed it seemed to have frequent periods of a few minutes each when it just wouldn’t resolve. Also was unable to get a matrix/synapse setup working behind it. It’s handy as a free service and nice if you just need basic DDNS, but it’s not the most reliable for hosting stuff from my experience.
I eventually settled on buying my own domain. Was much cheaper and easier to figure out DNS management than I was expecting, and my hosted services run so smoothly now.
Edit RE: downvotes: fuck me for sharing my experience? Kinda thought that was the point of this community…
@Confused_Emus @rtxn Figuring out DNS is always fun.
And never ever ever make any, even small, DNS change on a Friday. Unless you don’t like weekends.
Is it time to break out the DNS haiku and pray to the name gods?
deleted by creator
@whoareu cloudflare tunnel can easily help you do that. the only limitation is your domain will need to be from cloudflare. It works well, I am hosting an instance without any public IP and without exposing any ports.
Your domain need to be tied to cloudflare you don’t need to buy one from them. I just moved mine to them didn’t pay them a dime
You actually want a cloudfare tunnel if youre going to do that. It protects your real IP. Hosting a fediverse instance will draw attention to your real IP eventually otherwise.
deleted by creator
You also could just do lan
You could, but for many of us, the point of having access to our services is to have access from anywhere :-)
Yup, everything in my setup is primarily used in my house. The only reason anything is publicly accessible is so I can show it off occasionally.
You can self host anything like this, all you need is buying a domain and set something up like DynDNS which updates the entry of the domain with your new IPv4 as soon as it changes.
I would recommend to not open your services to public, but set up a wireguard (or other VPN) endpoint in your home, which you then use to access all your services.
I think, an alternative to that would be some servicees from tailscale or cloudflare, I suppose
Basically everything. Self hosting doesn’t rely on public access.
Rent a VPN, setup a wire guard tunnel and fuck your ISP!
Anyway having a real public IP on a residential block is basically impossible anywhere but in the USA, I guess.
Straya. I have a static ip. Costs like 5$ a month
North America?
straya = australia
Thanks, I was thinking of the fitness app
That’s strava
Ah, yes. That’s the one.
CGNAT blows, but easy to workaround w/ a $5/mo VPS.
Public IPV4 here. It’s not static, but very rarely rotates. DDNS ftw.
Telus Residential in Canada.
I just use a DDNS updater. That’s honestly good enough for most purposes.
Alternatively, you could use a service like Zerotier, Tailscale or Netbird to create a virtual private LAN connection to a free Oracle VPS, then route the traffic from the VPN to your home network.
You can use Tailscale, you can access your personal services with it but also expose public services with their Funnels system.
Keep in mind that while the clients are open source, their servers are running proprietary software.
I started using headscale (the opensource reimplementation of tailscale server) on a private vps. It is incredibly better compared to plain wireguard. I regret waiting so much before switching.
Something that really made my life easier: wireguard is poor at roaming: switching to and from my wifi created issues because the server wasn’t reachable anymore from its public ip and wireguard didn’t bother to query the DNS again to check the new IP. Also, configuration is dead simple because it takes care of iptables for you (especially good when you enables forwarding to a node).
Since the server just sends small messages for the control plane and all the traffic is p2p between the devices, the smallest vps with the smaller connectivity is more than enough to handle it.
Literally anything you want. You don’t need a static IP, any dynamic IP with a software updater will work. For example, I have some public sites proxied through Cloudflare, and I use the DDNS updater for Docker that keeps my DNS correct.
I use a cheap VPS and connect all my relevant devices to it via a VPN (aldo self hosted w/ wireguard). It’s $5/month and does the job.
Tailscale or Cloudflare will solve your problems.
Put everything behind Tailscale or another VPN and use it that way from outside devices. There should be very little need to have a public IP, and if there’s something that has to be exposed, use ngrok, cloudflared or Tailscale Funnel.
Self host all your stuff and use tailscale if you just want to provide private services to yourself
I believe duckdns has a tool that checks your public ip on a schedule to update your subdomain. (Which they provide for free last I checked)
That would solve not having a static IP, not solving having no port forward right?
You usually only need to specify the internal host ip to setup a port forward. It should forward that to whatever the public ip is at the time.
If the isp is providing the model/router and generally being oppressive i highly recommend researching if you can place your own router behind it.
Oh I’m fine, static IP and so on, but, for example, my friend has this crappy shared ports system so I’m interested in something alleviating that. What you described seemed like the solution to non-static IP addresses so I just commented that.
Cheers
softwares
That’s like ‘traffics’ and ‘manies’ and ‘mails’, right?
They don’t seem to realize that you can run whatever software you want internally.
Why do you need to expose a service publicly?
Why do you need to make a question questioning OP needs, when he is looking for a solution to a problem?
Because of the XY problem. The problem OP is stating may not actually be the source of the issues OP is experiencing.
Finding out what OP is trying to do will better inform a solution and may make the stated problem irrelevant.
Good point, but did it solve anything?
OP doesn’t seem to have responded, so no, but that’s not the fault of the question.
