The original post: /r/selfhosted by /u/uForgot_urFloaties on 2025-01-04 23:19:37.
Hi! Long time lurker and, I believe, first time poster, at least first time to try something relatively significant in selfhosting. I wanted to learn more about networking, security and deploying services so I decided to repurpose my old desktop into a server and play around a bit.
I want my lab to be secure as possible and to be able to access it and my services with complete privacy from outside my LAN, reduce tracking, ads and augment overall privacy of network, replace some 3rd party services like Google Drive (file storage and sharing), Notion (note taking and project planning) and have an easy way to organize and access important documents like invoices.
That would mean:
- Remote access and manage server configurations and filesystem
- Encryption of communications of clients outside LAN
- Encryption of outgoing traffic
- Avoiding port forwarding
- Cloud Storage
- Note taking and project planning
- Documents access
- Remote management of network and devices on it.
With my tremendously limited knowledge I’ve come up with this:
- Security and network management
- Firewall (OPNsense, PFsense, OpenWRT)
- Auth service (Authelia)
- DNS + DHCP (Adguard Home)
- VPN
- Network management (NetAlert X)
- Reverse proxy (Traefik, NPM or Caddy v2)
Services
- Paperless-ngx + Samba
- NextCloud or OwnCloud
- Obsidian or Appflowy
Given that my router is really limited I will use the server as my DNS and DHCP provider and leverage DoH. I’m not sure if I’ll use Debian or ProxMox (never used proxmox). Diagram
https://excalidraw.com/#json=2NW8aYSeYf2bjqWAU38xz,M2TvLaPK1s2XdJLki-25Cw
Does this make any sense?
Anything that should be removed or added?
Are my specs enough for what I’m trying to do? Or should I scale down?
Is this okay as a first project?
Would this allow to add other services in the future? Like media servers, hosting some of my own projects with something like Coolify?