Live data from Hacker News

Self hosting in 2023

grifel.dev

151–160 of 307 posts

Re: Self hosting in 2023

#151

Self hosting is appealing but I’m worried about exposing my home IP to the world. Is this something to be worried about

Host your DNS on 3rd party provider like Cloudflare and proxy all http requests. I've got traffic from all foreign countries turned off from them since I'm not an international business. I imagine you can probably configure your server to only accept connections from cloudflare if you're ultra paranoid.

Re: Self hosting in 2023

#152

Earlier quoted context omitted.

Not _exactly_ as easy, you also need a valid https cert, and set up a cronjob to renew it. And for some other reply here, "as easy as it was in 2003" really doesn't mean "easy" :v

> Not _exactly_ as easy, you also need a valid https cert, and set up a cronjob to renew it. Web servers like Caddy automate this for you: you just indicate that you want HTTPS for a particular site and the rest is taken care of for you (in the case of public sites and HTTP-01 challenges, at least). Link: https://caddyserver.com/docs/quick-starts/https Even Apache2 has mod_md which does pretty much the same thing (sa…

Can't do http challenges because my ISP blocks port 80 inbound.

Re: Self hosting in 2023

#153

> if you want to Dockerize it, then Docker related stuff is required i.e. Kubernetes Yeah... I'm not surprised the author gave up on it, but you absolutely do not need to use k8s if you're dockerizing something like a blog. I'm a little baffled at this sentiment.

Why k8s? docker-compose works just fine.

Re: Self hosting in 2023

#154

More people should try to self host things again. Seems that people are forgetting how things work and instead use services that does it for them at some cost. Self hosting is rarely complicated. It's also easy to achieve better performance and lower cost in many situations.

This. I have anywhere access to 5 machines, way more storage than I need, and 100% control of everything that goes on in the network.

Re: Self hosting in 2023

#155
post #36

I'm still not convinced that self hosting is cheaper though. Where I live, both the electric grid and Fibre connections are unreliable, and the ISP charges about $3/month for a static IP. Assuming 2.5W for a RPi, it takes 1.8kWh a month, costing around $0.25 for electricity. This also has the downside of using residential IPs, having to deal with CGNAT/NAT if the ISP has no static IPs, exposing your home IP, slow dis…

I got a 15 watt Intel NUC for free as a business discard. It has an NVMe, 16GB DDR4, and a spinny 1TB SATA drive for backup. My ISP hasn't gone down or made me change addresses in years, but I'm waiting on that day so I can have Copilot write me a script to automatically update my DNS settings in Cloudflare (with DDOS protection) every 5 minutes via cron so I don't have to explore the world of DDNS again.

OTOH, if you have to deal with double NAT, good luck with that hot garbage.

Re: Self hosting in 2023

#156
post #24

I self host and use a RPi 3B+. Actually I have a total of 3B+ but only one is actually doing anything for the website. I have my database running on a RPi 4b with 4gb. I could easily consolidate to a single Pi but early on I had different plans for each one but just keep 'em running for no good reason. I'm fortunate in that I have a static IP. Initially I was using NOIP and it worked great but then noticed my IP addr…

I do similar with the VPS and reverse proxy, but use a wireguard tunnel from my home device to the VPS to allow nginx to hit my local device instead of forwarding a port. Avoids punching a hole in your local network, avoids issues when your home IP changes, and ensures nothing ends up going over the internet in the clear.

[deleted]

Re: Self hosting in 2023

#157
post #5

If you don't need all that cloud operations/deployment infrastructure, self hosting a website from home in 2023 is as easy as it was in 2003. Get a DDNS, do the NAT port forwarding, run some apache/nginx/whatever and push your files with sftp or similar to the server. In contrast to 2003, upstreams got better -- even Germany has average upstream speeds of 20mbit/second nowadays [1]. With 20mbit/sec you can do quite s…

My problem is that I have never been able to purchase residential internet that allowed me to open port 443 or port 80.

Why do ISPs do this? Is there a legitimate reason or they just feel that their clients don’t host these services so they might as well block the ports for safety?

Re: Self hosting in 2023

#158

One thing to be mindful of is security. The last you want is for your setup to be compromised, be used to send spam/botnets and then getting perma-banned from your ISP. I would argue it's a lot less risky just to put your static site on S3/Github etc.

You don’t get perma-banned from your ISP for getting malware. That’s pure FUD. Far more people (at least 2 orders of magnitude) end up infected with malware and become members of botnets from just clicking dumb shit. They don’t get banned from the ISP either.

I had my cable ISP call me a couple times about a business account a few times. I run my own mail server. A POP3/SMTP account got hacked and started sending out spam. They're very polite, professional, ask you to fix the problem and move on.

Re: Self hosting in 2023

#159
post #129
post #119

Earlier quoted context omitted.

If you're using a modern web server like nginx, then you have to really do something wrong to get hacked serving static files.

That's not really fair, zero days will always exist.

What setup is immune to zero days?

Re: Self hosting in 2023

#160
post #157

Earlier quoted context omitted.

My problem is that I have never been able to purchase residential internet that allowed me to open port 443 or port 80.

Why do ISPs do this? Is there a legitimate reason or they just feel that their clients don’t host these services so they might as well block the ports for safety?

Not sure but probably some security thing - if you don't need it why leave it open to abuse.

An ISP I've used in the past hasn't allowed self hosting on a standard plan but has allowed on a plan you need to ask for specifically.

Post reply on HN