Hi all,
I am running proxmox on a mini PC with a handful of services in my stack. I also run NPM in an LXC to reach my services through my domain name (service.domain.tld).
For my Arr related stuff, I use Usenet, and everything runs through a VPN.
I have three services which are public. Jellyfin, Seer and BookOrbit (for syncing Kobos).
Currently I have no security besides the built in login managers from the services, but I am considering setting up Authentik. I know I’m asking for trouble with my current set up.
I have elderly and extremely tech averse family members who live in two countries other than me, so tech support can be a challenge.
A lot of people suggest running a VPN, but it would be difficult for my family and I don’t know how to make it work syncing our Kobos with BookOrbit.
I’ve also seen some posts about tunneling to a VPS somewhere and users can connect to the VPS without a VPN.
I feel this question has been asked several times, and I tried searching here and on the internet in general, but my knowledge is not good enough to use the right terms and to get something that is idiot proof.
Any suggestions on best practices or links to guides you recommend would be much appreciated. Also, what EU based affordable VPS would you recommend?
Don’t put them on the internet. Seriously, don’t put stuff on the internet. These days critical CVEs are coming out weekly and it is unlikely that you even detect the compromise.
What is your use case? Maybe there is a better way
Family members on two different countries connect to my Jellyfin server from several devices (phones and android boxes), seer for requests, and BookOrbit for their ereaders.
You need a VPN. It will cause inconveniences but the way currently have it setup is highly vulnerable to attack. I would look into something like Netbird or just a plain Wireguard VPN. If they are connecting primarily from home you could always setup a simple proxy device that forwards connections over a VPN from the local network.
Security should absolutely come first. If you can’t provide basic security I wouldn’t recommend hosting anything especially for other people.
For enough. I recognize I am very uninformed in this area, and most of my resistance is due to the high effort of setting things up remotely.
I’ve seen a lot posted about netbird. What’s the advantage of that vs wireguard?