vlans is one method.
this post was submitted on 28 Oct 2026
8 points (100.0% liked)
Self Hosted - Self-hosting your services.
21405 readers
1 users here now
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules
- No harassment
- crossposts from c/Open Source & c/docker & related may be allowed, depending on context
- Video Promoting is allowed if is within the topic.
- No spamming.
- Stay friendly.
- Follow the lemmy.ml instance rules.
- Tag your post. (Read under)
Important
- Lemmy doesn't have tags yet, so mark it with [Question], [Help], [Project], [Other], [Promoting] or other you may think is appropriate. This is strongly encouraged!
Cross-posting
- !everything_git@lemmy.ml is allowed!
- !docker@lemmy.ml is allowed!
- !portainer@lemmy.ml is allowed!
- !fediverse@lemmy.ml is allowed if topic has to do with selfhosting.
- !selfhosted@lemmy.ml is allowed!
If you see a rule-breaker please DM the mods!
founded 5 years ago
MODERATORS
You need a separate device to act as a firewall. See if you can get a device running OpenWRT or pfSense to manage your whole network (search those terms on eBay to find cheap devices pre-flashed) and put the server on its own VLAN with minimal access to the outside world and no access to your trusted LAN.
You'll want to look into the concept of a DMZ. Basically another subnet that's separated from your private LAN by a firewall.