I ain’t your bro, pal. ;)

New weekend project! Lol

I absolutely agree, to the point where I thought you were agreeing with a different post I made. This is the way!

There are lots of free or nearly free ways to host a static site with your domain, and basically walk away from it for years at a time just fine. I wouldn’t use Cloudflare just on principal for just static site hosting, but its fine I guess. All the software forges host pages for free, and a bunch of smaller outfits like Neocities. Even a static site on a VPS is nearly zero maintenance. When was the last time there was a CVE for remote code execution that would effect a Linux VPS hosting only a static webpage via Caddy or Ngnix and key-based SSH? (I don’t actually think there has been one).

Absolutely, I use a VPN for self hosted services I can’t be bothered to secure properly and don’t need exposed to all that mess. Wireguard is amazing. I used OpenVPN for years and it was such a pain in the ass mobile. I remember when it first came out, I set it up and made a SIP VoIP call with my phone. I could toggle between WiFi and cellular networks without the audio even glitching, let alone a call dropping. That was honestly like black magic back then.

Sorry to have made you upset. I consider Cloudflare to be the “gatekeeper” here.

I have seen all the walkthroughs and it looks like the worst of both worlds -false sense of security and more complexity and weird non-transferrable knowledge than first glance. I suggest they use a VPN to connect to anything you can’t secure easily, as there are lots of options, and far smaller attack surface than a Cloudflare “protected” (hint: its not protected from anything but the lazyest automated attacks) proxy.

Note: I understand moderate sized businesses using Cloudflare because DDOS attacks for ransom are a thing and a days outage can cost a lot of money. But its a protection racket and I don’t blame victims.

At the moment, every time I want to access my server, I have to turn off my VPN so I can turn on tailscale.

Yes, mobile devices typically cannot run two VPNs at once. There are two issues here, when at home and when out on other networks.

At home, the solution is not to round-trip out to your VPN provider and then back into your network via the public Internet using your domain. Unfortunately. That creates a huge latency and bandwidth penalty when you are physically at home and unnecessary complexity.

Instead, if you must use your VPN service while at home, you need to find the split tunnel settings to allow your phone to access the local network while connected to the VPN service. They usually hide that setting because it opens up the security of said services and allows some leaks, but it should be there.

When out on other networks, it gets harder. If you get creative with networking, you could connect a computer to your commercial VPN service and have all your tailnet devices use it as an exit node, which has the nice benefit of paying the VPN service for “one device” and using as many as you want, but is dependent on your home network speed and a PITA to set up.

Tailscale does integrate with one VPN provider so you can use one app for both tasks, but it may not be the provider you want. I don’t know If their direct competitors do the same, maybe shop around a bit. One VPN app for both use cases is what you want, not two different VPN apps.

Finally, if none of the above works for you, then yes, you are back to accessing your self-hosted services via the public internet and your domain name while travelling and using your commercial VPN. You will have to secure the service, and that will take some learning to do safely. That will be a journey and not something you want to just throw together quickly. You might be able to restrict incoming connections to just your commercial VPN IP address range (in addition to all of the other proper config required) to further reduce the attack surface. Sorry, that is a bit of bad news.

Edit: I have been seeing mTLS (client certificates) come up in selfhosting discussion more and more lately. If the particular service you are running has a walkthrough for that, including support for whatever client apps, it gets you almost to VPN level security. But most do not, and if they do, its alpha stage. However, keep an eye out for that in the self-hosting world as it may solve your issue in the future.

My understanding was tailscale is to connect different machines across the internet, but that a traditional VPN hides your information

You got it! When you google VPN services, you get all these companies selling products for encrypting your internet traffic (90% snake oil IMHO). Main usecase nowadays seems to be making your browsing appear like you are in a different country. This is not what people are referring to in this thread by “VPN”, even though it is the exact same underlying technology.

Tailscale is actually trying to simplify the original VPN idea, which is to create a secure private “network” over the internet, so your devices can securely talk to one another, no matter where they are physically (over the internet). When you are out on the road, your phone can see your home server just like they were on the same home network, and there’s no way for an attacker to see the traffic or get access to those machines. You might also read about Wireguard or Zerotier -same idea, the first is more rudimentary but is used by Tailscale for the actual encrypted traffic part, the second is their main compeditor (all three are legit good options depending on your priorities). Tailscale is pretty good at being easy to get going because it takes care of authentication, routing, and port forwarding for you. They even helpfully proxy your encrypted traffic if the machines fully cannot connect p2p with each other for whatever reason (slow, but can save your butt). The apps are pretty decent too. I used Tailscale for a long time then eventually self-hosted it once I knew what I was doing sufficiently. I still use their apps.

Sounds like you may be really starting from scratch on your learning. It would be best to work entirely inside a VPN like tailscale for complex apps like jellyfin if you want them. You can set up https, but there’s no harm either way. You might not use your own domain right away inside your VPN, but you will a little down the road. You will get annoyed with using IP addresses for your services and set up an internal DNS server eventually. You can safely experiment and make mistakes inside your tailnet.

For learning to set up an open Internet exposed service, use a completely isolated, dedicated computer (maybe a raspberry pi on a demilitarised zone of your internet router or better yet a $5 VPS on someone else’s network). Then read up on hosting a “static website” with either ngnix or Caddy. I prefer the latter because one short config file can set everything up for https and take care of the certificates for you. This can eventually become the gateway into your other services from the open Internet, but do not do that from the start, just a simple personal website. This will require learning a little Linux system admin, SSH (read up on key based authentication so you can disable password authentication in SSH), remote file management, and configuring a webserver, DNS, and certificates. Lots to learn.

Because it is just hosting static webpages, theres almost no risk of it being hacked and used maliciously if you misconfigrure something or forget to patch it. Static sites are awesome nowadays anyway, though, you don’t even really need a fancy site generator to get started, just some simple HTML files. A fun and easy project is a hand written list of your favourite web links and then set your browser’s new tab page to it. Instantly useful and fully under your control.

I actually envy your spot on your learning journey. It was such a rewarding experience for me to do all the above.

For a personal website, just point the main domain or one subdomain at something like github pages or another static site hoster and start forwarding email to their regular email. Zero maintenance to start and cost. Grow from there.

Step 1: buy a couple extra years and set an annual reminder in your calendar. If you are happy with it, you will be together a long time and don’t want it to expire on you while on a vacation or something.

I just don’t get this take of getting your own domain and seld-hosting, but run it all through cloudflare. Its sad.

For torrents specifically, I would suggest getting some friends together to rent a seedbox or VPS on a torrent friendly provider. You may have total monthly bandwidth limits, but you have much better speed because p2p works so much better with a publically routable IP and open ports anyway.

Its the last remnant of the various property owning/landed gentry/aristocracy control of government. They had to give up their exclusive right to sit in court and then “democratic” government, and then their exclusive right to vote.

They are holding on to money-as-influence, trying to convince us its fair because everyone can make donations (you get a great tax receipt!!). However, even donation limits are mainly just a way to cover up their thumbs on the scale, because all they require the rich to do is spread out their money.

Indeed. The propaganda around these new AI models was that they were so dangerous that they would break the security of everything.

Turns out the biggest issues were a couple of user privlidge execution vulnerabilities? I guess that is testiment to the actual human effort that went into everything.

I’m heartened that there hasn’t been any arbitrary code remote execution vulnerabilities that would have actually caused major problems.

We have known for a while that user security is only one layer and shouldn’t be relied on 100%. Thats precisely why people run anything remotely dangerous in a VM, not just as an unprivilidged user. If you are running a service in docker, sure this is bad, but only catastrophic if the service also has a vulnerability allowing remote execution AND that machine has access to something else sensitive.

I would love to hear a better noun representing comodified computer processing as differentiated from storage, or network bandwidth/throughput.

There are a few examples where they run turbine gas generators for power. In those cases the noise (and pollution) are in an entirely new class of problem. They just do so much compute.

We still pay a lot of civil servants to add value to the X platform across the province.

I would be fine with public agencies just publishing an RSS feed and newsletter. Communities can pull those posts in and discuss them, but it hasnt been a great use of civil servants jobs to manage social media platforms.

I do think the inflated valuations are in-fact existational threats to Microsoft and Google. Tech stocks are so over valued that they very well can go into a death spiral when investors no longer believe the company will grow exponentially. Its happened before, and will happen again. Thats why they are so desperate to hype AI. Thats the only illusion that have left to justify future growth.

I mean, the names will still be there, but you will have consolidation and buyouts and other changes of ownership. Some will continue as a shell of their former selves (like old school IBM), while others will just vaporise (Kodak). There’s not really a reliable mechanism for a companies valuation to shrink by several orders of magnitude and just cut back and continue as a stable smaller company.

Obviously, the people at the top will get government handouts to stay rich and it will be all our pensions that get cleaned out. Thats how this works. Cheer the bubble bursting, but only because the earlier the less harm for all of us. Ram won’t get cheaper either.

Not the above poster, but I would say the cost. Modern EVs are designed to replace cars, and so cost the same or more, while being not quite as convenient for long trips.

We could have all had lightweight, city-speed but cheap, short-range EVs for a decade or two already if that was the approach taken. The battery requirements for 60kph and maybe 100km of range are super minimal, even before you go lighter. Like an order of magnitude smaller.

Might have worked if the street infra and laws allowed it. Would have been super tough to pull off at the start, and a lot of people lack the parking for two different vehicles. I do remember some companies trying these, but there’s no where appropriate to drive them.

Fediverse integration into feed readers seems like next step for them. Not just a link to share an article, but integrated discussion using your preferred Lemmy or Mastodon or whatever server. It would have to discover threads since you are getting the actual link from RSS.