Hey all,

I’m setting up a homeserver and trying to figure out the best way to access it remotely. I’ve been looking at different solutions, but I’m a little stuck.

I’ve been looking at VPNs, but it feels weird, to route everything through my home IP when I’m also trying to use a commercial VPN for privacy / to combat services fingerprinting me based on my IP.

I’m currently considering a reverse proxy setup with an authentication provider like authentik or authelia, but as far as I understand, that wouldn’t work well with accessing services through an app on my mobile device (like for jellyfin music for example.) I did think about just opening up the ports and using a DDNS with a reverse proxy, but is’nt that like a big security risk?

Keep in mind I am no network admin, but I don’t have anything against learning if someone can point me in the right direction.

Also I heard some people say that on proxmox you should use unprivileged containers instead of vms for your services, does that hold up?

Any recommendations for tools or approaches?

  • Scrollone@feddit.itEnglish
    1·
    7 hours ago

    Sorry to burst your bubble, but removing the login form via CSS is just a cosmetic effect and it doesn’t have any effect on your security, since bots will try to brute force the login directly using the login endpoint.

    • ohshit604@sh.itjust.worksEnglish
      1·
      6 hours ago

      Oh I am fully aware it just cosmetic, that’s why I added this line In my original comment:

      but be warned if you take this route that the CSS can be re-enabled on the login screen using your browsers element inspect

      hence why I also suggest just outright blacklisting all IP’s and only whitelisting the known few at the reverse proxy level.