- 1 Post
- 8 Comments
I can route selected devices/groups/VLANs through the client. That’s how I’m using it with my phone. Phone connects to wireguard server. Wireguard server IP is in the router’s VPN client list for outbound traffic.
➡️ local access + VPN for web
I‘m using two different setups:
Phone with wireguard app:
- VPN client installed on my router
- WireGuard server Running on Router
- Phone connects to the routers wireguard server and from there my phone is routed through the VPN client for web traffic (but I’m not using OpenWRT so you have to check if this is possible for you)
Laptop with wireguard app and VPN installed as browser extension:
- WireGuard app is configured to only route traffic to my local subnets through the wireguard VPN.
- Web browser is encrypted through the VPN extension.
Really depends on what you need. For me this setup fits my bill.
But there’s also tailscale (which you can also selfhost: headscale)
Additionally you could also set up your own independent wireguard server to get more granular control for routing and firewalling. But you would need a device that’s running 24/7 (same for headscale). A raspberry pi would probably be enough for that.
DownByLaw@sh.itjust.worksto
Selfhosted@lemmy.world•Your logging is probably downEnglish
17·1 month agoDon’t forget about Anubis and crowdsec to make it even safer inside your LAN
DownByLaw@sh.itjust.worksto
Selfhosted@lemmy.world•Your logging is probably downEnglish
38·1 month agoHave you already tried implementing an identity provider like Authentik, so you can add OIDC and ldap for all your services, while you are the only one that’s using them? 🤔
DownByLaw@sh.itjust.worksto
Selfhosted@lemmy.world•What else should I self-host?English
3·9 months agoI’ve set up navidrome a long time ago, way before I’ve started using Jellyfin. And it just runs like a charm paired with some great clients for the subsonic ecosystem. So honestly it never even occurred to me to use Jellyfin for music.
DownByLaw@sh.itjust.worksto
Selfhosted@lemmy.world•What else should I self-host?English
63·9 months agoJust from the top of my head:
- Navidrome (Music)
- Audiobookshelf (Audiobooks)
- Paperless-ngx (documents)
- Joplin (notes, lists and more)
- Komga (comics)
- Mealie (mealplanner, recipes, shopping lists)
Edit: I left out some stuff that you or others already mentioned. But here’s the extended list so I can copy/paste this if someone else asks in the future.
- Immich (photos)
- Home Assistant (home automation)
- Jellyfin (Movies, TV series and more)
- Calibre & Calibre-Web (ebooks)
- Pi-hole (DNS sinkhole)
- Vaultwarden (password manager)
- Nextcloud (data sharing)
- Homarr (Dashboard)
- Headscale (Tailscale Server)
Honorable mention:
- Proxmox (Hypervisor)
- Portainer (Container Management) - I know a lot of people wouldn’t recommend it for various reasons, but works alright for me
In order of personal preference:
Maybe just try them all out and find the one that fits you best. You could also use more than one (which is what I do).
Really depends on the drive. The one that died and my new SSD both have specified operating temps from 0°C to 70°C Exceeding operating temps for longer periods of time will cause damage to the drive and often activates throttling.