32
Need some help with remote access please. (lemmy.dbzer0.com)
submitted 8 months ago by Tippon@lemmy.dbzer0.com to c/selfhosted@lemmy.world
27 comments fedilink hide all child comments

Hi all :)

I've got a media server set up running Navidrome, Calibre-Web, and Immich along with some other services, and want to get access to them from outside the house now. I've read that Caddy is good for securing things by making it easier to set up encryption, but I'm not sure I understand that side of things.

I've set up a Cloudflare tunnel for a Minecraft server, and I've got Tailscale installed but not set up with an exit server yet, but understand that Caddy would be better. I ideally want to set up apps on my wife's phone so that she can access the libraries too.

Is it just a case of installing Caddy and setting up the services I want to share through it? That seems too easy, like I've missed something.

If it makes any difference, I've got a standard UK ISP router with a few ports forwarded, and I'm going to add an access point and then a LevelOne GEP-5070 managed switch to learn about things like VLANs. The link to the switch is here:

https://mayflex.com/shop/product/GEP-5070

I feel like I'm missing something, but can't think what, so I'd be grateful for any help :)

you are viewing a single comment's thread
view the rest of the comments
[-] possiblylinux127@lemmy.zip 3 points 8 months ago* (last edited 8 months ago)

Caddy supports mTLS so if your client apps support it you could put everything behind client certs (assuming your services support it)

You also could use plain Wireguard since it might be simpler if you have the option to open up the firewall. I personally use netbird since I'm behind CG nat

I would also deploy IPv6 since it will help a lot of performance on carrier grade Nat networks like mobile data.

[-] Tippon@lemmy.dbzer0.com 1 points 8 months ago

I'm still a bit confused with all of this so I might be getting things completely wrong. I thought that I needed to get certificates for anything that I wanted to make public with an URL, and that's where I thought Caddy came in, but a few of the other replies have said that I can use the Cloudflare tunnel and let them sort out the encryption. That seems like it should be easier for me, as I've dealt with it already.

IPv6 isn't available through my ISP as far as I can tell, they only enable it locally through their router at the moment.

this post was submitted on 26 Nov 2025
32 points (94.4% liked)

Selfhosted

61409 readers
591 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
ayyy@sh.itjust.works
curbstickle@anarchist.nexus
curbstickle_lw@lemmy.world