indigodaddy
2 days ago
This is really well done, but the problem I have with (most) selfhosted bins is that anyone can use it, and I don’t want to be responsible for the content that might show up.
This is super neat though, and could almost be used as a blog replacement (if of course I could prevent others from using it/posting to it :) )
mubou2
a day ago
People don't usually expose self-hosted services directly to the internet, even if they have a login page. You use a reverse proxy, that way they can be HTTPS, share port 443, and use subdomains (Caddy makes this really easy). And then adding auth becomes trivial, and you can even put your services behind some SSO sign-in if you want to.
If possible though it's best to use a VPN so that nothing needs to be accessible from the internet at all (not to mention then you can access your NAS shares w/o needing a web UI). That's why I actually prefer when self-hosted apps don't have their own auth system, or at least let me disable it. If everything's internal only, I don't need it anyway.
thunderbong
2 days ago
Usually, for these kind of programs, I put them behind a proxy with basic auth.
Also, when I tried to add something on the demo site, it asked me for an auth key.
Looking at the code, the package.json file has an entry for AUTH_KEY (in the Cloudflare config) to prevent random people from pasting stuff.
indigodaddy
2 days ago
Ah, well that's kinda perfect actually
0_____0
2 days ago
I'm planning to set up a VPN into my home network for stuff like this. Services, NAS, etc. that I want remote access to but don't want exposed to the deep dark ocean of the internet.