Starlink with self hosted?

Submitted ⁨⁨3⁩ ⁨weeks⁩ ago⁩ by ⁨muntedcrocodile@lemm.ee⁩ to ⁨selfhosting@slrpnk.net⁩

I live in a rural aussie (with no fibre options) area with the worlds shittiest internet and especially bad upload. I been self hosting a bunch of things and simply just struggling through the shit connection.

Will be getting starlink to remedy the internet issue but it seems i need a business (priority) plan to get a public ip so i can access my services from the greater internet. This is however more expensive and i would like to avoid the additional cost if possible.

I was thinking i could wireguard proxy from my server at home to a cheap/free vps to bypass the restrictions but i suspect that would mess with how nginx on my home server manages ports etc. Plus i use my own hardware not just for security but also no recurring costs otehr than power so paying for a vps just to proxy seems like a waste.

Also been having dns issues with duckdns vos dynamic ip starlink seems not to support static ips so how should i resolve this issue.

source

Comments

Sort:hotnew top

gazter@aussie.zone ⁨3⁩ ⁨weeks⁩ ago
There is usually free tier packages available on the big cloud providers. You’ll get pretty limited resources, but you will get a static IP, and the ability to run a tunnel. There will be a couple extra steps, but nothing major. You’ll likely have the ability to run a couple services from there as well- maybe something to kick-start your home server if it falls over for whatever reason, or even your URL shortener.

source
BastingChemina@slrpnk.net ⁨3⁩ ⁨weeks⁩ ago
If it’s just you using your self hosted server then tailscale would be my go to solution with no hesitation.

source
- muntedcrocodile@lemm.ee ⁨3⁩ ⁨weeks⁩ ago
  I need to shair shortened links files links etc etc. So i cant just use a vpn to for myself unfortunatly.
  
  source
  - randombullet@programming.dev ⁨3⁩ ⁨weeks⁩ ago
    Tailscale funnel?
    
    source
slazer2au@lemmy.world ⁨3⁩ ⁨weeks⁩ ago
CloudFlare tunnel?

source
- pcouy@lemmy.pierre-couy.fr ⁨3⁩ ⁨weeks⁩ ago
  I wish people would stop recommending cloudflare in self-hosting communities
  
  source
- ibewes@lemmy.world ⁨3⁩ ⁨weeks⁩ ago
  This. Implemented this for my homelab stuff running over StarLink and it’s been great.
  
  source
- muntedcrocodile@lemm.ee ⁨3⁩ ⁨weeks⁩ ago
  Dont they essentially man in the middle u? It doesn’t cloudflair still require that cloudflair itself can send a request to your IP?
  
  source
  - slazer2au@lemmy.world ⁨3⁩ ⁨weeks⁩ ago
    You run a container in your environment and it will call home to CF to make the tunnel to pass the traffic to you.
    
    source
calmluck9349@infosec.pub ⁨2⁩ ⁨weeks⁩ ago
I have starlink. I use a cheap VPS. Tailscale and Reverse proxy to selfhost. I have docker running nginx proxy manager on the VPS with a could other docker containers running on the VPS like a speedtest and a few other things because I can. The heavy things like nextcloud sit at home and via the reverse proxy points it over the tailscale tunnel to my main docker.

source
- muntedcrocodile@lemm.ee ⁨2⁩ ⁨weeks⁩ ago
  This is what i was thinking. I dont like the idea that i will have an extra critical failure point. Btw do u know if i can avoid the vps if i do ipv6 and drop ipv4?
  
  source
  - calmluck9349@infosec.pub ⁨2⁩ ⁨weeks⁩ ago
    I don’t think so. But I haven’t tried. I use the Starlink as more of a cold failover for when my LTE/5G goes down. $40/mo vs $120/mo for same speeds and LTE/5G has better latency for me. I work (tech) from home and live rural.
    
    With DNS-fu you could have two VPS! I saw a project somewhere for nginx proxy manager that clones the settings. Then your only failure point would be the local tailscale.
    
    source
Txmyx@feddit.org ⁨3⁩ ⁨weeks⁩ ago
I just use ipv6. And a simple docker container that updates my dns records. For applications that should not be exposed I use tailscale

source
leverage@lemdro.id ⁨3⁩ ⁨weeks⁩ ago
Just use a dynamic dns service and expose the stuff you need to access publicly, publicly. If you want to be extra careful, or secure services that otherwise have no security, your reverse proxy should be able to forward auth, which forces people to login before the request is handled. This gives you a single point of security failure again, which I’m not seeing as any different from whatever you’re thinking about with wireguard and a vps. You can also selectively configure which services use forward auth, which are fully public, and which aren’t accessible outside of LAN addresses. This would give you the option to use something like Tailscale for your private stuff when away from home without having to use the forward auth.

source
- poVoq@slrpnk.net ⁨3⁩ ⁨weeks⁩ ago
  Starlink uses CGNAT, so that is not possible since the public IP is shared between multiple subscribers.
  
  source
  - leverage@lemdro.id ⁨3⁩ ⁨weeks⁩ ago
    Ah, wasn’t aware of that, makes more sense now. Seems like OP needs to pipe everything through someone else’s server, or fork over for the static IP, until IPv6 is finally universally functioning. I’ve seen good things about Cloudflare, at least as long as they aren’t doing multimedia.
    
    source
    -> View More Comments
shortwavesurfer@lemmy.zip ⁨3⁩ ⁨weeks⁩ ago
If you wish, you could always host your stuff through tor and use it as a hidden service.

source
- muntedcrocodile@lemm.ee ⁨3⁩ ⁨weeks⁩ ago
  That would be too slow unfortunatly.
  
  source