this post was submitted on 18 Mar 2026
55 points (92.3% liked)

Selfhosted

56958 readers
413 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

  7. No low-effort posts. This is subjective and will largely be determined by the community member reports.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

I've been thinking about finally getting myself a proper domain for my server, but a friend told me that to get one I either need a VPS with a public ip (which just takes all the fun out of selfhosting) or purchase a static ip, which is beyond what I'm willing to spend for a hobby. Do I have any good options or should I just let it go?

Also, if this isn't the correct community for this, I'd appreciate being pointed to the right one, thank you

Update: after reading the comments the two main options I'm considering now are either a cheap VPS to use as proxy for my network via wireguard, or DynamicDNS. I'll see if I can figure out the rest from here, thank you!

top 50 comments
sorted by: hot top controversial new old
[–] Borger@lemmy.blahaj.zone 2 points 11 hours ago

Nobody else mentioned DuckDNS. It’s free and has worked great for me for years.

You’ll need to install a client that syncs/auto-updates your public IP, then pretty much never touch it again.

[–] Mubelotix@jlai.lu 2 points 1 day ago

Sure, you can just use your home wifi. Some of them are static, and others don't change really often, like once a month, so dyndns will work well. You could also use cloudflared that is a proxy you can use even if you can't open your ports

[–] EpicFailGuy@lemmy.world 2 points 1 day ago

I have the VPS setup, and it's not bad at all, I pay 3.99 a month and it acts as a gateway into my network filtering any malicious ip by using crowdsec.

I use Pangolin reverse proxy, but you can also use netbird.

I prefer this because on top of the routing options it ads extra security and lets me share subdomains with friends and family without exposing my network to the internet

[–] lavander@lemmy.dbzer0.com 3 points 1 day ago (1 children)

You need static IP only if you want to host the autoritative DNS server for your domain (spoiler alert: you don’t).

You don’t need to proxy your traffic via VPS (higher latency for no good reason) and the dyndns providers are over priced.

What you need is:

  • Buy your domain
  • Use a free DNS provider (I used for years the excellent dns.he.net but it is a bit cumbersome. Nowadays I gave up and I now use cloudflare without any proxying, just pure DNS)
  • Point your registrar to the dns provider
  • use ddclient to update the IP of a domain entry (e.g. server.example.com)
  • add as many CNAME as you want that point to that entry (so you can have stuff like Jellyfin.example.com www.example.com Nextcloud.example.com)

That’s all… ddclient will update that single dns entry every time your server restarts (or the IP lease expires and you get a new IP)

The only thing you need to pay here is the domain (you can get free domains but that is another story and tbh I would not recommend, there are cheap domains out of there)

[–] Everyday0764@lemmy.zip 1 points 3 hours ago

mhh I don't think this works behind cgnat...

it works if you have a dynamic public ip. Where I'm from, generally, they give you a natted ip.

[–] IronKrill@lemmy.ca 6 points 1 day ago

My dynamic IP rarely changes. When it does, it gets updated by a Docker favonia/cloudflare-ddns image. I have yet to notice downtime.

[–] imetators@lemmy.dbzer0.com 5 points 1 day ago

My ISP changes IP somewhere around once a month. I own a domain on porkbun and they offer a simple docker compose script that updates my records to a current IP.

I believe other domain selling platforms also have similar scripts or solutions.

[–] mic_check_one_two@lemmy.dbzer0.com 10 points 2 days ago (1 children)

What you’re looking for is called Dynamic DNS. I use Cloudflare for my DNS (which feels a little like making a deal with the devil) and Cloudflare-DDNS to automatically update my DNS records when my WAN IP changes. Basically, the container checks the current WAN IP, checks the current Cloudflare DNS records, and pushes a change if they don’t match. It runs every few minutes, and then rests again until the next check. I’m sure other DNS providers have similar ways to set up DDNS.

It’s not a 100% foolproof thing, because your WAN IP changing will take a few minutes to update. But a few minutes of downtime is much better IMO, when the alternative is needing to manually VPN into my server (if the VPN even still works, since the WAN IP changed), and troubleshoot it every time the IP address changes.

[–] Joelk111@lemmy.world 1 points 1 day ago (1 children)

You can configure it to run as often as you want (well, I'm not sure about cloudflare, but with other services you can, like DuckDNS)

Yeah, I personally prefer to keep things running fairly light. I’m not running a 99.9% uptime server with hundreds/thousands of users, so I can tolerate a 0-5 minute downtime every few days.

[–] mantra@lemmy.zip 31 points 2 days ago (2 children)

Could you use dynamic DNS? Pretty sure there are some free options.

[–] cmnybo@discuss.tchncs.de 17 points 2 days ago (2 children)

One of the better free options is FreeDNS, but you are limited to 5 records.

If you want your own domain, I would suggest Porkbun. They have an API that can be used for dynamic DNS.

[–] Bakkoda@lemmy.world 2 points 2 days ago

I have used FreeDNS for so long I don't remember and never ever had a problem. I have a few domains i don't even use set to public as well.

load more comments (1 replies)
[–] lumen@feddit.nl 2 points 2 days ago

Something like deSEC.io allows you to use your own domain for dynamic DNS for free.

[–] fozid@feddit.uk 19 points 2 days ago

I've had a domain with a dynamic up for over a year with no problems. I have a simple script that runs every 30mins to check if my IP has changed, then updates the DNS records when required.

I run a variety of self hosted things via my domain on a dynamic IP. I just have dynamic dns set up to check my current public IP periodically, and update the dns entry if it changes.

[–] Svinhufvud@sopuli.xyz 11 points 2 days ago

It is very much possible to have a dynamic IP and a usable domain.

Both Cloudflare and desec.io (for example) have APIs that you can hit everytime your public IP changes.

I have a script that checks every minute whether my public IP has changed from the last check, and if it has, an API call will be sent.

With a scheme like this, your downtime will be minimal, if ever even noticed.

My dynamic IP almost never changes. I’ve had 3 in the last 10 years. How often does yours change?

There’s also dynamic dns if yours changes often.

[–] ada@lemmy.blahaj.zone 12 points 2 days ago

Our setup uses a domain pointed at a dynamic (but stable) IP with a script to update it periodically

[–] Bakkoda@lemmy.world 8 points 2 days ago

I've been self hosting for 20 years with the same domain(s) and have never owned a static IP. Use a reliable DNS service with simple update tools (curl on a cron job for example).

[–] qjkxbmwvz@startrek.website 7 points 2 days ago (1 children)

VPS with a public ip (which just takes all the fun out of selfhosting)

Why do you say this? My VPS only runs a reverse proxy and WireGuard, with all services hosted on my computers at home.

[–] Inkstainthebat@pawb.social 3 points 2 days ago (2 children)

I'll be honest, despite already having a reverse proxy on my home setup I did not think of doing something like that. That sounds like a great idea

[–] qjkxbmwvz@startrek.website 2 points 2 days ago

Cool, I recommend it!

I have my public facing reverse proxy point to my public services, and I also have it set up as a "roadwarrior" VPN to my home. So, I can connect my phone via WireGuard to my VPS, and a local DNS resolves my private services to the private IP addresses in my home network (so, I also run a reverse proxy on my server, for internal services).

I also have an off-site backup using this


just a raspberry pi and an HDD at family's, that rsyncs+snapshots over the WireGuard network.

I'm sure I'm not following all the best practices here, but so far so good.

load more comments (1 replies)
[–] Decronym@lemmy.decronym.xyz 8 points 2 days ago* (last edited 3 hours ago)

Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I've seen in this thread:

Fewer Letters More Letters
CF CloudFlare
CGNAT Carrier-Grade NAT
DHCP Dynamic Host Configuration Protocol, automates assignment of IPs when connecting to a network
DNS Domain Name Service/System
IP Internet Protocol
NAT Network Address Translation
VPN Virtual Private Network
VPS Virtual Private Server (opposed to shared hosting)

[Thread #181 for this comm, first seen 18th Mar 2026, 09:30] [FAQ] [Full list] [Contact] [Source code]

[–] Sunnydmess@lemmy.world 7 points 2 days ago (1 children)

I use this, Cloudflare zero trust. I run a connector (tunnel) named cloudflared on a raspberry pi which connects to cloudflare. The zerotrust tunnel configuration (in CF dashboard) lets me route http traffic into my local network by domain. The Application access policy in zero trust lets me secure it.

[–] irmadlad@lemmy.world 3 points 2 days ago (1 children)

I realize there is a lot of back and forth among selfhosters about Cloudflare's usage, but I am thoroughly pleased with the set up. The only thing I chuckle about is their promotional emails.

Your site saw more threats last month than the average site on Cloudflare. Here’s what that means:
The good news is that these threats were mitigated by Cloudflare with the basic web application firewall (WAF) and bot protection you have on the Free plan.
The bad news is that more complex and sophisticated cyber attacks may not be stopped by your current web application security posture.

...however they promise if I spend some money, that will all go away, and it might, but it's good now so don't wake the sleeping dog.

[–] TrippinMallard@lemmy.ml 2 points 2 days ago (1 children)

You can use Netbird reverse proxy to connect your domain to any device on your mesh. Netbird cloud supports the reverseproxy too now if you don't want to self host netbird on a VPS.

[–] irmadlad@lemmy.world 1 points 2 days ago

Well, that's nice to know. I'm somewhat familiar with NetBird.

[–] cecilkorik@piefed.ca 5 points 2 days ago

You don't have any great options but you do have some options. You'll need dynamic DNS, which you can get for free by various providers. This will manage a "dynamic" DNS entry for your occasionally changing, non-static IP at home. The dynamic DNS entry won't be on your own domain name, it will be on the provider's domain name. But wait! That's just step one.

You can still get your own, fully-functional domain name, and you can have all the domains and subdomains you want, and set them up however you want, with one important restriction: You can't use IP addresses (because yours is dynamic, and changes all the time and you would have to be constantly updating your domain every time it does, and there would be delays and downtime while everything gets updated).

Instead, your personal domains have to use CNAME records. This substitutes the IP from a different domain INTO your domain. So you CNAME every entry on your own fancy domains to point at your dynamic DNS provider, which manages the dynamic part of the problem for you and always gives the real IP you need. Nobody sees the dynamic DNS name, it's there, but it's happening behind the scenes, they still see your fancy personalized domain names.

It's still not going to be perfect, it won't work well or at all for certain services like email hosting (self-hosting this is not for the faint of heart anyway) that are very strict about how their DNS and IP addresses need to be set up, but it will likely be good enough for 99% of the stuff you want to self-host.

[–] modcolocko@lemmy.blahaj.zone 4 points 2 days ago (1 children)

The VPS I rent from Ionos for tunneling is $2 a month just so you know it’s not a major amount of money.

Same. Best decision I ever made. Pangolin and netbird are killing it!

[–] entheo@lemmy.world 7 points 2 days ago (1 children)

I believe cloudflare has some sort of tunneling option but I've never really looked into it, it might get around that.

[–] Dave@lemmy.nz 3 points 2 days ago

It does, yeah. If you aren't averse to cloudflare then it's a great option.

From memory I think it's limited to http/https traffic, but that's normally not an issue, just have all your services behind a reverse proxy.

[–] TrippinMallard@lemmy.ml 3 points 2 days ago* (last edited 2 days ago)

You can use Netbird Cloud's reverseproxy to point your domain to a device on your wireguard mesh.

That way your home server can be under 3x NATs and dynamic IP and you'll still be fine.

Later if you want to own the netbird you can self host it on a VPS if you're willing to migrate all devices to your self hosted wireguard mesh.

[–] marud@piefed.marud.fr 5 points 2 days ago (1 children)

If you already have a domain name and don't want to switch to something else, know that some DNS registrar have an API to handle the domains. For a short period of time I had to rely on this and had a little python script to get my current IP and apply it to every A record in my DNS zone.
It worked well (but then I ~~took an arrow in the knee~~ had static IP)

load more comments (1 replies)
[–] drone509@discuss.tchncs.de 5 points 2 days ago (1 children)

It is possible to use a dynamic DNS service. They're typically pretty cheap. I did for several years. It kind of sucked so I rented a VPS.

[–] Inkstainthebat@pawb.social 4 points 2 days ago (1 children)
[–] drone509@discuss.tchncs.de 4 points 2 days ago

Keeping hardware running 24/7 cheaply is difficult. Expanding an existing setup is expensive. Consumer grade ISP's will block unexpected network protocols sometimes seemingly for no reason. Dynamic DNS isn't super robust, so several times I went on vacation and the DNS service would flake. Maybe it's better if you pay more for it, but I have no complaints about my VPS. It's nice to be able to just reliably reach my web stuff and not worry a cat bumped the power cable.

[–] EncryptKeeper@lemmy.world 2 points 2 days ago

What are you asking? You can just buy a domain whenever you want. You can use it on your server without a VPS or static IP.

Are you asking us how to make your services reachable at that domain publicly over the internet?

[–] Appoxo@lemmy.dbzer0.com 3 points 2 days ago

DynDNS is your friend.

[–] eksb@programming.dev 4 points 2 days ago (3 children)

If your home IP does not change often, you can use a dynamic DNS service. But your services will be unavailable from the time that your IP changes and the time the DNS record is updated and the cached responses expire.

load more comments (3 replies)

I started with dynamic DNS on my home server, then moved to an encrypted tunnel. the issue with ddns is that your provider may block your ports. Mine eventually blocked 80, 443, and the wire guard port.

When I switched to tunnels, with cloudflare as my provider, there was nothing my provider could do about it.

So, I'd recommend tunnels since many providers don't want residential users hosting servers.

[–] foster@lemmy.hangdaan.com 3 points 2 days ago* (last edited 2 days ago) (1 children)

You do not need a static IP address or dynamic DNS if your domain registrar provides a REST API. My current registrar is Porkbun and they have a REST API. I simply have a cron job that regularly checks if my public IP[^1] differs from the domain's A-record. If it does, it updates the record to match the public IP address using their API.

[^1]: I use Porkbun's ping endpoint to obtain my public IP. There are also alternatives such as Ipify.

load more comments (1 replies)
[–] MentalEdge@sopuli.xyz 3 points 2 days ago* (last edited 2 days ago)

I don't have a static IP, and I just make sure to never ever let my DHCP lease expire. My ISP provides the same IP to the same MAC when renewing the lease. My longest streak on the same IP was three years.

As long as I always turn my router off by cutting the power, it won't release the lease, so I keep my IP even through reboots. My last one didn't release the lease at all, so it only ever got a new IP if it was off for over a day, or if I set a new MAC.

When my IP does change, I've configured my DNS record to only last an hour. So updating the domain to point to a new IP only takes an hour to update.

[–] IsoKiero@sopuli.xyz 3 points 2 days ago

I have dynamic dns address and a handful of CNAME records on my domains pointing on that dyndns-address so I can use 'proper' names with my services. When my public IP changes it takes a few minutes for the records to update, but it usually happens only when my router reboots so it's been good enough for me.

Also I use two separate dyndns providers so there's likely at least one working DNS entry to my network.

[–] czl@lemmy.dbzer0.com 3 points 2 days ago

If you’re self hosting you could even use https://github.com/qdm12/ddns-updater and skip a third-party service (if your registrar accepts dynamic entries)

[–] mhzawadi@lemmy.horwood.cloud 3 points 2 days ago

I use OVH for all things DNS, TIL: they have a dynhost thing that will do all the DNS updating for you!

https://help.ovhcloud.com/csm/en-gb-dns-dynhost?id=kb_article_view&sysparm_article=KB0051640

[–] grue@lemmy.world 2 points 2 days ago

I have a domain, but all I use it for so far is email (with an email provider, not my own mail server, hosted locally or otherwise). I'd still call that "usable," though.

load more comments
view more: next ›