this post was submitted on 29 May 2025
236 points (90.1% liked)

Selfhosted

46671 readers
334 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

(Sorry if this is too off-topic:) ISPs seem designed to funnel people to capitalist cloud services, or at least I feel like that. And it endlessly frustrates me.

The reason is even though IPv6 addresses are widely available (unlike IPv4), most ISPs won't allow consumers to request a static rather than a dynamic IPv6 prefix along with a couple of IPv6 reverse DNS entries.

Instead, this functionality is gatekept behind expensive premium or even business contracts, in many cases even requiring legal paperwork proving you have a registered business, so that the common user is completely unable to self-host e.g. a fully functional IPv6-only mail server with reverse DNS, even if they wanted to.

The common workaround is to suck up to the cloud, and rent a VPS, or some other foreign controlled machine that can be easily intercepted and messed with, and where the service can be surveilled better by big money.

I'm posting this since I hope more people will realize that this is going on, and both complain to their ISPs, but most notably to regulatory bodies and to generally spread the word. If we want true digital autonomy to be more common, I feel like this needs to be fixed for consumer landline contracts.

Or did I miss something that makes this make sense outside of a big money capitalist angle?

you are viewing a single comment's thread
view the rest of the comments
[–] dgdft@lemmy.world 95 points 1 week ago (4 children)

If you’re looking for sympathy, you got it. Fuck the state.

If you’re looking for solutions, use a cheap $5/mo VPS that exists purely as your gateway host. Run everything you want on your home machines, then tunnel the traffic to your gateway and reverse-proxy it there. Your data stays in your hands, you can spin up and expose new services publicly in a matter of minutes, AND your home IP isn’t vulnerable to doxxing or DoS.

[–] user224@lemmy.sdf.org 25 points 1 week ago (3 children)

use a cheap $5/mo VPS that exists purely as your gateway host

Now, why so expensive?
https://racknerdtracker.com/?sort=price
Disclaimer: I never used Racknerd (nor any other VPS).

[–] revv@lemmy.blahaj.zone 14 points 1 week ago

I've used them for years with literally zero issues. Performance a for a cheap VPS. And since all the real work happens on my machines, if they enshittify, I can easily move elsewhere.

[–] Zetta@mander.xyz 8 points 1 week ago

"JUST $10.28/YEAR - WOW!!" Laughed out loud at that, and I'll have to give this a look. Currently I just use nginx and duckdns to expose my home IP for my self hosted stuff.

[–] xyro@lemmy.ca 2 points 1 week ago

Thank you sir!

[–] sunzu2@thebrainbin.org 11 points 1 week ago

Thanks king, this actually makes sense!

[–] yonder@sh.itjust.works 9 points 1 week ago (2 children)

I basically do exactly this, but I am running the reverse proxy on my home computer: the VPS is literally just acting as a proxy, for which I use wireguard to tunnel the connection. So far it's worked great, though initial setup was a pain.

[–] dgdft@lemmy.world 6 points 1 week ago* (last edited 1 week ago)

This is a great suggestion!

Lest anyone miss the buried lede, this approach means that traffic is pre-encrypted as it passes through the gateway VPS - so even if your VPS gets hacked, it’s way harder to steal credentials and break into the services running on your home network.

[–] Appoxo@lemmy.dbzer0.com 3 points 1 week ago

So you essentially have a DMZ between your VPS and home network that is divided by your reverse proxy?

[–] rezz@lemmy.world 8 points 1 week ago (2 children)

Is there a more detailed guide to this practice and the pros/cons?

[–] dgdft@lemmy.world 3 points 1 week ago (1 children)
[–] Shimitar@downonthestreet.eu 4 points 1 week ago

Really appreciated the reference!

Good to know my wiki is of any use to somebody.

:)