Self-hosting

3721 readers

5 users here now

Hosting your own services. Preferably at home and on low-power or shared hardware.

Also check out:

founded 3 years ago

MODERATORS

poVoq@slrpnk.net

sam_uk@slrpnk.net

Options for protecting home IP on my self hosted home srver (startrek.website)

submitted 1 week ago by thetrekkersparky@startrek.website to c/selfhosting@slrpnk.net

12 comments fedilink hide all child comments

I've been running a home server at home running CasaOS for a few months now. I use a wireguard vpn to remote in to use Jellyfin on my phone etc. Basically i want to know if there's a way i can both hide my public IP (such as using a conventional vpn for torrenting) while still being able to remote in to my server?

I've been thinking of running running all my network traffic through my server and setting up some sort of firewall too, but I'm fairly new to this as this was originally just a project I did out of spite after getting rid of Spotify. I'm fairly green when it comes to networking and servers, but I'm otherwise pretty good with computers and can muddle my way through most things.

Any suggestions are greatly appreciated.

you are viewing a single comment's thread
view the rest of the comments

[–] towerful@programming.dev 2 points 1 week ago (6 children)

Ah, gotcha.

So... You generally have to pay a VPN company to get access to their VPN exit nodes, and "hide" in among all the other traffic.
There is nothing you can self-host to do that.

ProtonVPN used to be a popular recommendation, however they are slipping out of favour due to behaviour over the last couple of years.
If you are looking for a VPN for anonymity, be careful of "review" articles posted on blogs owned by dodgy VPN providers.
I'm not sure who the "go to" VPN provider is these days.

If you rent a VPS (virtual private server) in order to run your own VPN exit node, and the VPS provider gets a letter regarding illegal activity, then your VPS will be deleted.
I don't know of a VPS provider that will protect customers privacy WRT legal requests (maybe there are, but they will be exceptionally expensive).

So everyone pays a VPN provider that doesn't keep logs in order to hide amongst the herd.

In order to make sure that your file downloading system uses a VPN instead of the default gateway for internet access is a huge field.
So you need to describe exactly the software you want to use the VPN exit node, and how it's installed.
Because the solution could be host firewall, docker networking, isolated networks.... Pretty sure there are many others.

[–] thetrekkersparky@startrek.website 1 points 1 week ago (5 children)

So, I already pay for Proton VPN, mostly for the E-Mail, but I do use the vpn currently on my main PC to torrent, which I then manually transfer to my server over the network, but I would like to eliminate the middleman and torrent directly to the server, while still being able to easily remote in. I run CasaOS on my Homelab and I was planning on installing qbittorrent in a container, probably through Portainer. I'm already running Soulseek on the server the same way (originally I was running slskd, but it was overly complicated to set up and once it was set up and working there were lots of upload errors and I didn't like the UI, so I changed to a Nicontine+ docker), but that's just open to the web.

[–] SolarpunkSoul@slrpnk.net 1 points 1 week ago (1 children)

I went through the same thought process as you a while ago, also with CasaOS. I ended up using the *arr suite, Jellyseer and then this container via Portainer https://haugene.github.io/docker-transmission-openvpn/. All the instructions are on there for whichever provider you go with, and all it took was making sure the env variables and permissions were in the right place.

[–] thetrekkersparky@startrek.website 1 points 1 week ago

Thanks for the recommendation. Once I found the "n" I mistyped as "m" in one of the file directories it actually went quite well. I looked at setting up sonarr & radarr, but its really just me and my partner using it right now, so I'll put that on the back burner until I get more storage.

load more comments (3 replies)