this post was submitted on 11 Jul 2023
13 points (84.2% liked)

Selfhosted

40152 readers
560 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago
MODERATORS
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
13
Secure Access and Android Apps (feddit.de)
submitted 1 year ago by [email protected] to c/[email protected]
11 comments fedilink hide all child comments
 

Hi all, I've been in love with the idea of self hosting some essential services for my home and over the past year I've set up a domain, a thin client as a server and installed some docker containers that caught my eye.

Since I'm a bit paranoid about intrusion, and already didn't manage to set up nginx for intranet use, I set up a cloudflare zeroTrust account, since there were a lot of youtube tutorials about that at the time.

So now I've set up zeroTrust with a google auth in between my homeserver and the internet, which suits me just fine and is simple enough my SO is willing to use the set up as well.

The one snag I've hit with this setup is that i can't use companion apps (e.g. paperless, grocy, homeassistant) on my phone, since their API access doesn't cope with coudflare's routing.

Do you have any advice on how to get a set up that has access control and lets companion apps through to the service? I've seen alot of recommendations for wireguard and VPNs, but I'm not sure my wife's company laptop and phone will play nice with those, since I assume I'd have to install a client.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 1 points 1 year ago (1 children)

Im not using cloudflare, but I had to add docker container IP to trusted proxies in homeassistant config to allow connection from different domain. This might even not be related to your question, but might be helpful idk

Wireguard client is so simple to setup, just scan QR code and you can toggle it on/off with a button. Or you can copy paste few lines of config if you cant scan. Just check wireguard app for whatever OS you need (iOS, Android, Windows, Linux), it cant be more simple IMO

[–] [email protected] 1 points 1 year ago (1 children)

the main problem i have isn't internal to my network, unfortunately, but that any call to my domain gets intercepted by cloudflare and sent to auth, which is good for security but kills API access to my services...

Yeah, but wireguard has two problems for me: I do not have install privileges on company devices, and even if I did, if they use a VPN to access company networks, doesn't that interfere with any VPN access to my home server?

[–] [email protected] 2 points 1 year ago

I believe you can have only 1 wg connection active at a time, but switching between them should be easy as toggling a button. Sorry mate, I cant help more than that, hopefully more experienced users will jump in with better answers