Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Free DDNS with Cloudflare and a cronjob

github.com

Post reply on HN
Print view View original

91–100 of 202 posts

Re: Free DDNS with Cloudflare and a cronjob

#91

Post by codetrotter »

tcfhgj wrote: post #78
codetrotter wrote: post #75

Earlier quoted context omitted.

Yes, but getting it in a response from an external server means I don’t have to be specific about which interface to get the IPv6 address of and so on.

the same specific interface used to contact the external server

Which is neatly abstracted away so you don’t have to think about it unless you want to. And therefore reaching out to an external server and having it say where the request came from is the path of least resistance for a script that can work across different hosts with minimal machine specific configuration.

Listen, if you want to check the IPv6 address from the interface list go ahead I’m not trying to stop you.

But because I anyway need to reach a third party to know my own IPv4 address then yeah when that third party can also tell me IPv6 address I’m gonna do it that way.

Re: Free DDNS with Cloudflare and a cronjob

#92

Post by kuschku »

vladvasiliu wrote: post #80
KennyBlanken wrote: post #68

Earlier quoted context omitted.

If someone finds LetsEncrypt challenging, they don't have sufficient network andsystem administrator skills to be running a private, public-facing web server. They should be running tailscale.

Well, one of the "challenges" is the one in a different comment: most registrars don't allow fine-grained control over who can update what DNS records. Can it be done? Sure. But do I want to spend money on this for my home lab if I can work around it? Not a chance. I'm kinda sensitive to the "MITM as a service" argument, but for my use case, it's not a problem.

> Well, one of the "challenges" is the one in a different comment: most registrars don't allow fine-grained control over who can update what DNS records.

Afaik, every major registrar allows you to add an NS record for the _acme-challenge subdomain, allowing you to put the _acme-challenge subdomain on a custom, self-hosted DNS server.

That in turn allows you to make the permissions as specific as you'd like. Personally I just run powerdns in docker for this.

Re: Free DDNS with Cloudflare and a cronjob

#94

Post by szundi »

tomschlick wrote: post #66
noname120 wrote: post #20

Earlier quoted context omitted.

Does Cloudflare have a history of sunsetting products they've bought? Acquisitions by Google, Apple, Meta, etc. are yellow flags that the product may cease to exist soon. I wonder if Cloudflare has a better track record in that regard.

Not that I'm aware of and this is likely now just a cloudflare worker that returns the IP they already have. I would imagine maintenance is basically zero as its feature complete.

True but there is no such thing as zero maintenance

Re: Free DDNS with Cloudflare and a cronjob

#96

Post by password4321 »

scosman wrote: post #89
thousand_nights wrote: post #10

Instead of using DDNS, I have been using Cloudflare tunnels to expose my home services to the internet. The setup is much simpler and it seems like it's more secure too You specify a port and point it to a subdomain and it just immediately works, no maintenance necessary. The daemon only needs to be installed once with a simple terminal command

I do the same with tailscale, which has a nice friendly UI for setting everything up. I setup some Cloudflare DNS records to the tail scale 100.x IPs to make them easy to remember.

Some ISP DNS servers will not return internal IPs, Verizon FiOS and 172.x specifically.

Re: Free DDNS with Cloudflare and a cronjob

#97

Post by jsheard »

skinner927 wrote: post #88
vladvasiliu wrote: post #80

Earlier quoted context omitted.

Well, one of the "challenges" is the one in a different comment: most registrars don't allow fine-grained control over who can update what DNS records. Can it be done? Sure. But do I want to spend money on this for my home lab if I can work around it? Not a chance. I'm kinda sensitive to the "MITM as a service" argument, but for my use case, it's not a problem.

You don’t need automated DNS fiddling for lets encrypt. Certbot can either hook into Apache or NGINX, or run its own standalone server for verification.

You do need DNS fiddling if you want a wildcard cert, LE only accepts DNS challenges for those.

Re: Free DDNS with Cloudflare and a cronjob

#98

Post by genewitch »

dathery wrote: post #90
genewitch wrote: post #82

Earlier quoted context omitted.

there's a way to tell caddy server to host its own access.log So you have some junk VPS or whatever that just has caddy hosting its log with an easy to remember domain (they're cheap enough), and you go like "curl http://easydomain.com/idreallylikemyip " and then once more: curl http://easydomain.com/N | grep "idreallylikemyip" the code that used to work is on my github, i uploaded it there a week or two ago. Someone…

You can have Caddy return the user's IP address directly: https://caddy.community/t/caddy-server-that-returns-only-ip-... Similar things are also possible with nginx and Apache.

this was implemented in 2018, but it is good to know. it also doubled as a dumb way to pass messages between hosts.

Re: Free DDNS with Cloudflare and a cronjob

#99

Post by wiradikusuma »

For those who depend on Cloudflare extensively and have some traffic, I have a question:

I was researching whether it's worth it to switch my pet project to Cloudflare's various offerings (D2, Workers) instead of AWS/GCP, since Cloudflare has a very generous free tier.

But from quick googling (I think it's Reddit), some people said Cloudflare uses bait-and-switch where at some point you will need certain features that are only available in enterprise plan or something, basically significant cost increase.

Should I be concerned?

EDIT: I want to make it clear that I'm talking about significant cost increase, something that will catch many people by surprise.

Post reply on HN