Selfhosted
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil.
-
No spam.
-
Posts are to be related to self-hosting.
-
Don't duplicate the full text of your blog or readme if you're providing a link.
-
Submission headline should match the article title.
-
No trolling.
-
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the link in Rule 8 for details.
-
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post. )
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
view the rest of the comments
Just as much as Tailscale is self hosting. Tailscale is probably more concerning from a security point of view.
To me, Tailscale is not selfhosted at all. That's why headscale exists.
So not at all?
Tailscale is just a Service. Not sure how you could even think calling Tailscale self hosting.
What exactly is concerning about Tailscale's security?
I'm new to self-hosting and Tailscale was the easiest/fastest way I could get to access my stuff externally. I'm currently learning about the alternatives.
I'm not concerned about it personally, but you are putting a lot of trust in them as a 3rd party service provider. It's up to your specific risk profile if that's acceptable risk or not.
The alternative would probably be self hosting a vpn yourself with dyndns to handle ip address resolution. I'm biased (I have a professional networking background) but I don't think it's that much harder to setup either. But then I'm also a hypocrite and don't self host anything anymore.
There's also a valid argument to be made that doing it yourself is riskier because novices make mistakes. I don't think this is too big of a concern personally - it's not like you're rolling your own cryptography.
Like all VPN-like things, some amount of data has to flow through their system. But almost everything is encrypted nowadays so it’s generally not too big of a worry.
For Tailscale though, they see way less. They see your IP during device setup, and maybe during use if things are making it hard for them to enable a direct connection. Depending on your DNS setup, they may see some of your DNS requests.
Its also really easy to setup your own headscale sever and then nothing goes to them at all. I recommend a small VPS for that, rather than running it on your home internet connection.
Tailscale controls the routing, thus the traffic. They control which keys get trusted. They most of the time distribute and develop the software.
It would be quite easy for them to start snooping on traffic, while on the internet anything basically is additional encrypted, that would not apply so broadly to the traffic that get sent via tailscale especially the self hosted crowd, a lot of that traffic would be http and unencrypted.