I’ve been making people use VPN, but that’s been a huge barrier to entry. I’m in the process of switching to IP allow list in traefik.

Looks like you should be able to do so:

https://community.traefik.io/t/traefik-as-reverse-proxy-server-to-external-web-server/15619/3

https://community.traefik.io/t/traefik-v3-reverse-proxy-to-external-ip/25899

I just get alerts over telegram. They’re just regular notifications, but you could probably set specific notification behavior and sounds for the app?

Edit: Though that’s not a selfhosted solution. Sometimes it’s a decision between reliability and selfhosted. e.g., I went back to Tailscale from Headscale when I lost connectivity through Headscale and couldn’t figure out how to get it back.

Thank you for posting this! I’ve been increasing the memory for my VM over and over and it was using 24GB RAM + 4GB swap. Hopefully this will let me reclaim some.

If you click the source linked, you can read through all the details.

I use Jump for guests, Homepage for me, and Organizr for both.

I would just get set up on MxRoute and use whatever selfhosted service you want to interact with it.

For movies, try letterboxd.

My opnSense box does the same thing. I’d rather get to it via internal IP like pfSense worked. (I assume I can make that happen somehow, but I haven’t researched it yet.)

Do you see that only when you’re on the LAN or also when you’re coming in from WAN?

Get a new phone for use while traveling, then dump it when you’re back home. Leave your services behind.

No docker? :(

I think you dropped this: \

I definitely trust Proton much more than I trust myself.

If you’re not paying for a service, you’re likely being monetized by watching ads or providing personal data to companies that don’t necessarily have your best interests at heart.

This is a bit out of date. Nowadays, you pay for the service and are monetized by watching ads and providing personal data to companies that definitely don’t have your best interests at heart.

Why would you need to continue using the self-signed certificates for the Cloudflare connection? Just use the valid certificate for all connections.

Damn, where’d you find that deal?

I mean, you don’t have to watch it.

You want to split your domain so it resolves to a private IP internally and a public IP externally. So, your internal DNS server should return internal IPs.

Good point!