Is it safe to use IPFS without a VPN ?

I do it too. I guess I trust cloudflare more than the public Internet but when I have more money I’ll do it right

Thanks for the recommendation! Are there eBay search terms I should know? Used PC workstation?

I’m not sure if matrix will ever be able to overcome this hurdle

In an ideal world I’d host on an Intel nuc or similar, but for the time being a raspberry pi 4 is all I can afford.

I think you’re right, it was running out of ram before. It hasn’t done that since I’ve moved to nextcloudpi, thankfully.

I have a separate raspi 4 with yunohost that was slated for other experimental purposes, like Jitsi, but I’m still early in that process.

Thank you everyone for the suggestions, I learned a lot and I’ll continue to check back also.

My nextcloud raspberry pi server used to crash when it tried to do anything difficult, like open too many photos in a row. I adjusted some settings to try and keep it from running out of memory, but I’m not a very skilled sysadmin, and I’m using nextcloudpi now which adds another later of abstraction in an attempt to have saner defaults.

In a perfect world I would do this, but for nextcloud at least, I have to be able to access it from public computers where I cannot install and configure tailscale.

Sometimes I want to share services with friends and family too.

And Synology support for tailscale sounds like it’s finicky unfortunately.

Interesting, I already use cloudflare DNS and had “proxy” turned on for nextcloud, but I still had to open 80 and 443 on my router, so I’ll look up how to set up the free tunnel sometime

Thanks for the information. I will have to look into SNI and see if my router can support it – if I move someday to an ISP behind a more restrictive firewall, this system looks pretty good. (Or if I get unhappy with one reverse proxy handling everything).

Thank you, this looks like a great guide

Thanks, this is definitely the way I would like to go!

1. Can Caddy forward requests to other machines on the LAN?
2. Have you ever had to mess with HTTP headers?
3. Do the docker containers have to get certificates from let’s encrypt, or is caddy the only part that needs to manage a wildcard certificate?

I would like to use tailscale for some services, but the ones I access from public computers, like nextcloud or blog hosting, can’t be behind a VPN.

I would love the Synology to Synology backup to be behind the VPN, but I’m not sure I’ll be able to get it working, so that is lower down on my list.

Things like Jitsi would be cool to have behind the vpn, but then I’d have to get everyone to install tailscale on their phones and configure access, so that’s going to be too complicated for me and my family unfortunately.

I see what you did there

This is what I use

I use nextcloud notes because I already have nextcloud and my needs are not that sophisticated

I remember touch

Screen is great! My favorite though is byobu, a pretty screen

From reading the comments, I think you could be a lot leaner by selling the $100 setup fee, and telling people which “kit” is supported, and they buy that on their own.

That way you don’t have to deal with any of the physical infrastructure of buying/selling/storing hardware, and people can do some customization.

However I do think you’d need to put some restrictions in place so that people don’t buy cheap crap that doesn’t work and expect you to set it up and support it. They have to buy the kit or other compatible hardware.

I’m not sure what services you’d support, but personally I’d be interested in something like a personal introduction and setup of

• docker
• proxmox
• yunohost
• backups / restore (practice restoring)
• smb shared folder
• pihole / pivpn (can you have wire guard and openvpn setup at the same time for different uses?

Maybe migration of

• nextcloud

You could make different prices depending on what service they want, kind of like a bike stop.

I wouldn’t want a perpetual subscription, but I could stomach something like $100 setup + $5/mo for limited support for a year.

Best thing for me is that community support also exists for all these things too, but it’s hard to do it on your own sometimes.

Sweet! Let me know if it works for you!