Just exposed Immich via a remote and reverse proxy using Caddy and tailscale tunnel. I’m securing Immich using OAuth.

I don’t have very nerdy friends so not many people appreciate this.

    • @[email protected]
      link
      fedilink
      English
      31 month ago

      Seriously?

      Plex, Jellyfin, VaultWarden, AdGuard, Home Assistant, GameVault, any flavor of pastebin, any flavor of wiki, and the list goes on.

      If you’re feeling spicy throw whatever the hell you want onto a reverse proxy and put it behind a zero trust login.

      The idea that opening up anything at all through to the open internet is “dumb” is antiquated. Are there likely concerns that need to be addressed? Absolutely. But don’t make blanket statements about virtually nothing belonging on the open internet.

      • @[email protected]
        link
        fedilink
        English
        125 days ago

        None of those have to be public and can all be accessed with WireGuard. You just proved my point, moron

        • @[email protected]
          link
          fedilink
          English
          125 days ago

          Why don’t we just throw Lemmy behind wireguard while we’re at it.

          Literally anything can go behind a VPN. Doesn’t mean much at all. And the majority of those are commonly left on the open internet for friends and family, which would be annoying af to set up with WireGuard.

          I have enough issues dealing with VPN issues in my professional life, I don’t want to have to deal with them in my personal life as well.

          • @[email protected]
            link
            fedilink
            English
            124 days ago

            Tells me everything I need to know that you struggle with WireGuard… it’s dead simple. And can be completely automated so your household literally doesn’t need to do anything and their devices automatically connect to it.