Hey everyone,

I’m one of the people who still used proton and am now in the process of switching everything and trying to selfhost more.

I sucessfully setup Vaultwarden. I also decided I should move away from having my dockers publicly exposed with nginx reverse proxy and switched everything over to netbird. Im using their proxy feature now to access everything with custom domains and followed a tutorial to setup a bring your own proxy server on a vps. So now all my services are only accessible when my netbird vpn is active. I also spun up a pihole docker and added that to my netbird dns servers to try and get ad blocking on my mobile devices. So far so good.

I wonder however that while some webui’s like vaultwarden run with https, others like radarr dont. Is this a problem or does it not matter so much since i have the vpn running?

I dont really understand how I would go about making them https though. Im on unraid for my dockers and don’t see why some use https and others don’t.

Sorry if this is a convoluted post, I’m quite in over my head with all the networking and dns stuff and just hoping I’m not doing something stupid.

Thanks for your help!

  • y0kai@anarchist.nexusEnglish
    22·
    5 hours ago

    short answer (and the safest one) is yes, use HTTPS always.

    However, if and only if a service you are using is confined locally or via your privately hosted VPN (this just means not available over the public internet) you are probably OK without, unless there are other people on your local network who might be interested in snooping.

    with your VPN (looks like netbird in this case) you should be OK, as the VPN handles encryption in the absense of HTTPS.

    For more research checkout LetsEncrypt. its a super simple way to setup SSL (Which generally makes up the S part in HTTPS) and it’s free.

    i think many of us started like you. you’ll get there, you’re just about to learn a lot of stuff before you do.

    • Tekhne@sh.itjust.worksEnglish
      11·
      4 hours ago

      I just want to point out that it’s not just other people who might be interested in snooping. Compromised smart home equipment is a big potential vector of attack if services are unencrypted on your home network.

      Relevant XKCD: https://xkcd.com/1966/

      • dil@lemmy.zipEnglish
        1·
        1 hour ago

        Websites exist just to look through exposed pc’s files and webcams, or used to at least