I’m not really sure how to ask this because my knowledge is pretty limited. Any basic answers or links will be much appreciated.

I have a number of self hosted services on my home PC. I’d like to be able to access them safely over the public Internet. There are a couple of reasons for this. There is an online calendar scheduling service I would like to have access to my caldav/carddav setup. I’d also like to set up Nextcloud, which seems more or less require https. I am using http connections secured through Tailscale at the moment.

I own a domain through an old Squarespace account that I would like to use. I currently have zero knowledge or understanding of how to route my self hosted services through the domain that I own, or even if that’s the correct way to set it up. Is there a guide that explains step by step for beginners how to access my home setup through the domain that I own? Should I move the domain from Squarespace to another provider that is better equipped for this type of setup?

Is this a bad idea for someone without much experience in networking in general?

  • littleomid@feddit.orgEnglish
    1·
    12 days ago

    Three steps:

    1. point the FQDN to your network (Dynamic DNS).
    2. set up reverse proxy (Nginx, etc.)
    3. set up certificates (Certbot, etc.)

    Optional step 4: harden with fail2ban and a firewall.

    • bruce965@lemmy.mlEnglish
      1·
      12 days ago

      I would say this would be the proper way to do it (at least as a sysadmin), but since it’s OP’s first time I would simplify it to:

      1. Install CloudFlare ZeroTrust daemon on your local server;
      2. Set up reverse proxy such as Nginx (optional, the alternative is to use a different subdomain for each service, which might be easier);
      3. Point the FQDN to CloudFlare.

      Let CloudFlare handle the certificates, DDoS protection, etc… Link if you’d like to give this setup a try.

      • ag10n@lemmy.worldEnglish
        1·
        12 days ago

        Cloudflare isn’t very self-host, unless you want/need to trust a third party I wouldn’t recommend this.