I have my Immich instance setup with an nginx proxy for security and ssl, and that’s exposed to the internet. I have a domain for my personal website, so I just put up my Immich instance at a subdomain of that. I can now make public share links I can just copy and paste into a group chat. I haven’t added any other users yet but I’d I wanted to all they’d need to do is login via email/password.

This is an officially supported kind of setup for Immich, so I would consider it secure: https://docs.immich.app/administration/reverse-proxy/

I don’t have all of my homelab services exposed publicly though; I VPN in for those.

General tips for exposing a server to the internet:

• only expose the ports you need for services you intend to be accessible. Use a firewall and/or your router’s port forwarding settings to enable only what you need, with blocking as a default.
• update all software regularly
• only expose programs that are built to be exposed. For example, if you make a Flask website, they will warn you several times not to expose it directly, but to proxy it through something like nginx

Always the OG or the second one.

Samba.

Or one time I made my own simple file sharing website

I don’t see how that could be possibly true since Shaula is possibly the horniest character in the show

It probably isn’t going to cost less to get something without wifi.

Correct me if I’m wrong but wasn’t that the mimic girl who always enhanced the “features” of the girls she was mimicking?

Keep stuff that’s not designed to be exposed to the internet on your LAN behind your router’s firewall.

Use a VPN to access your LAN remotely. Tailscale is the easiest way to do this, but I found it not too hard to set up WireGuard.

Rimuru was previously male (before being isekaid) but the humanoid body is copied from a woman, but Rimuru goes by male pronouns (at least in the anime).

Fascinating. As someone who only watched the anime, I thought they identified as male. Those scenes mentioned where they identify as female were never shown.

I just selfhost bare git repos on an ssh server

Team Rocket sloppified Pikachu!

I have set up WireGuard manually running on a home server. It’s not that hard to set up IMO but that definitely depends on your experience level.

Other than that I’d second Tailscale which is similar but easier to set up

This is why I use CloudFlare. They block the worst and cache for me to reduce the load of the rest. It’s not 100% but it does help.

Some of those services are pretty easy to set up, some might be more complicated. You’d have to look around for open source projects for those services and see if you can find ones you like. It will take more time to get it initially set up than to maintain, but expect to fix something that breaks every once in a while.

As for cost, probably like a few hundred to a thousand USD can get a reasonable computer for this. You don’t need a GPU, but want a decent CPU, plenty of RAM, and a LOT of storage. Look for companies auctioning off old servers.

Loosely I’d say expect this project to be a whole hobby.

As the result of a single misconfigured security setting on my Android, I was locked out of my Google Account on my phone AND all of my PCs.

Just a heads up on what you are getting yourself into, if you fuck up your self hosted setup badly enough there is no recovery.

That isn’t necessarily intended to scare you off from self hosting, just that the first and most important lesson to learn is to have a good system of backups that are backed up automatically, are easy to recover from, and are separated enough from other copies of the data that if something goes terribly wrong one copy will survive.

I use rsync + ZFS for backups which includes historical backups

If the ISP doesn’t provide V6 though it’s time to switch ISPs.

cries in USA

I got a huge reduction in random login attempts when I changed my ssh port away from the default.

(Of course I also have actual security measures like log in by key only)

While selling data in general is shitty, I want to push back on the fear mongering a little bit.

This only applies to new accounts, can be opt-out of, and doesn’t apply to self-hosted content.

I tried jellyfin but it isn’t even close to as a good as plex