Selfhosted

60542 readers

601 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details.
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

MODERATORS

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world

230

Is they're an easy way to make my Jellyfin accessible outside of my home network for free? (anarchist.nexus)

submitted 4 days ago* (last edited 4 days ago) by Vegan_Joe@anarchist.nexus to c/selfhosted@lemmy.world

163 comments fedilink hide all child comments

I have docker installed, but only have a vague idea of how it works.

Back in the day, I would just port forward, but even then, I would need a static IP somehow.

I have heard a reverse proxy is an option, but that is an entirely new topic to me.

Surely there is an easy way to access Jellyfin outside of my home network that I'm just missing.

*Edit: I am blown away by all the help and support! I currently have tailscale running, and I'm in the process of purchasing a domain.

Thanks everyone!

you are viewing a single comment's thread
view the rest of the comments

[–] ohshit604@sh.itjust.works 2 points 3 days ago* (last edited 3 days ago) (1 children)

Traefik is what it uses to proxy things. You're comparing a full suite of tools with just one piece.

I mean, that’s debatable. Taking a look at their docker-compose.yml there are 3 containers they recommend running, with a 4 optional container.

image: docker.io/fosrl/pangolin:latest # Pangolin itself
image: docker.io/fosrl/gerbil:latest # WireGuard server
image: docker.io/traefik:v3.6 # Traefik Reverse Proxy
image: hhftechnology/middleware-manager:latest # Optional middleware manager for Traefik

To say this is a “full-suite” is a bit much when majority of the heavy lifting is done by Traefik, the middleware’s you assign to Traefik and WireGuard. Pangolin if I’m reading this correctly;

“Pangolin combines reverse proxy and VPN capabilities into one platform.”

Which is great! However as I mentioned previously, does not integrate well when these services are already setup to work standalone.

I suspect the same reaction from folks when they hear “download pangolin from the App Store, and use xyz credentials to connect.” And “download WireGuard from the App Store, and use xyz file to connect.”

[–] FlexibleToast@lemmy.world 0 points 3 days ago (1 children)

Pangolin uses gerbil with newt for those wireguard tunnels. That's a massive improvement already. It also adds a bunch more features like vpn, you can crowdsec, and more that I don't use. To say it's debatable if it's a suite of tools is just wrong.

[–] ohshit604@sh.itjust.works 1 points 3 days ago* (last edited 3 days ago) (1 children)

To say it's debatable if it's a suite of tools is just wrong.

How is it wrong to say it is debatable when Traefik and WireGuard have quite literally done majority of the development. Pangolin is just a man in the middle.

Pangolin uses gerbil with newt for those wireguard tunnels. That's a massive improvement already. It also adds a bunch more features like vpn.

According to the Newt ReadMe -

Newt is a fully user space WireGuard tunnel client and TCP/UDP proxy, designed to securely expose private resources controlled by Pangolin. By using Newt, you don't need to manage complex WireGuard tunnels and NATing.

Seems to me that WireGuard is their primary dependency, without WireGuard what use is it?

you can crowdsec

According to Pangolin docs they rely on the Crowdsec middleware offered by Traefik.

By default, Crowdsec is installed with a basic configuration, which includes the Crowdsec Bouncer Traefik plugin

[–] FlexibleToast@lemmy.world 1 points 2 days ago

Do you not understand what a suite of tools is? It's a curated collection of tools that have been chosen to work together. You're describing the reasons why Pangolin is in fact a full suite. You're right, Pangolin is the bit that orchestrates them and brings them together with an easier way to manage them. That's what a suite of tools does.