this post was submitted on 04 Aug 2025
73 points (97.4% liked)

Selfhosted

51079 readers
2150 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

hi everyone,

I was just about to self-host a Ghost blog but then was warned that my ISP might change my external IP address at any time, so I would need to pay for a static IP address.

Is that true?

(I'd not seen much about that in stuff I've looked up so far about self hosting)

you are viewing a single comment's thread
view the rest of the comments
[–] Prunebutt@slrpnk.net 4 points 4 weeks ago* (last edited 4 weeks ago) (3 children)

I could make this quick: Is your internet access behind a CG-NAT? If yes: you're gonna need a static IP.

[–] 3dcadmin@lemmy.relayeasy.com 6 points 4 weeks ago (2 children)

Not necessarily, Cloudflare tunnels, headscale/tailscale will sort that issue out amongst several other ways

[–] Prunebutt@slrpnk.net 1 points 4 weeks ago (2 children)

But how will a tailnet help for a blog? At some point, the https port needs to be open.

[–] 3dcadmin@lemmy.relayeasy.com 1 points 3 weeks ago

tailscale will tunnel through and you can set it to pass through https. Lots of different ways to achieve this, as long as you have control over the dns and are able to set https up it will work. This is why for me I still use cloudflare, you can even setup a subdomain through their tunnels and they act as a cdn. For example, I run a linkstack instance, send instance and much more

https://linkstack.relayeasy.com/@3dcadmin

[–] herrvogel@lemmy.world 1 points 3 weeks ago

Tailscale funnel is made for this.

[–] Paddy66@lemmy.ml 1 points 4 weeks ago (1 children)

I was going to use Cloudflare to sort this, but I'm uncomfortable how big they are getting / lack of competition in that part of the market. So we looked at Pangolin as an alternative, but it's a faff to self host.

Hence why we're back at exposing it straight out the back of Nginx Proxy Manager.

[–] 3dcadmin@lemmy.relayeasy.com 1 points 4 weeks ago

I get that.... fo me though as I have been using Cloudflare for many years I can't see any reason to change yet. That of course may change

[–] iii@mander.xyz 1 points 4 weeks ago (1 children)
[–] Prunebutt@slrpnk.net 2 points 4 weeks ago (1 children)

Care to explain what I got wrong?

[–] iii@mander.xyz 1 points 4 weeks ago (1 children)

Static IP is helpfull but not necessary. Even with NAT and a changeing IP there's options, such as:

  1. dynamic dns.
  2. Public reverse proxy or tunnel.
  3. Onion routing.
[–] Prunebutt@slrpnk.net 1 points 4 weeks ago (1 children)
  1. How do you open the https port behind a nas?
  2. That public tunnel needs at least a public IP address again.
  3. Ok, forgot that one. But then you're only accessible through Tor, isn't it?
[–] iii@mander.xyz 1 points 4 weeks ago (1 children)
  1. Port forwarding
  2. Yes, and there's services that do that for you
[–] Prunebutt@slrpnk.net 1 points 4 weeks ago (1 children)

You can't port-forward if you sit behind a nat.

[–] iii@mander.xyz 1 points 4 weeks ago (1 children)

Port forwarding was invented for exactly that

[–] Prunebutt@slrpnk.net 1 points 4 weeks ago (2 children)

Hou will you configure the ISP's NAT router to port-forward? You won't be able to reach the forwarded port if your ISP doesn't foward the port as well.

[–] Saik0Shinigami@lemmy.saik0.com 1 points 4 weeks ago (1 children)

ISP’s NAT

That has it's own name... CG-NAT. Thus why people are responding to you as if you're wrong. As you wrote it you are wrong though. But there's still answers like argo tunnels (if you are okay with cloudflare) and other similar solutions.

Or you can setup a vps and tunnel through that.

[–] Prunebutt@slrpnk.net 1 points 4 weeks ago (1 children)

Oh, I see. Sorry I was too dumb to research that term for the comment.

Or you can setup a vps and tunnel through that.

But then the VPS needs a static address.

[–] Saik0Shinigami@lemmy.saik0.com 1 points 4 weeks ago

But getting a static address for your VPS is likely much easier than getting it from certain ISPs.

For instance, Quantum Fiber doesn't support static IPs at all... But most VPSes can and do.

[–] iii@mander.xyz 1 points 4 weeks ago

Aah, ISP's NAT. Yes, in that context, it's correct that you can't port forward.

Perhaps you can STUN through, but unlikely to get a good port.

[–] Paddy66@lemmy.ml 1 points 4 weeks ago (1 children)

My router says it has NAT enabled (in the WAN settings section - for the internet connection)

[–] Prunebutt@slrpnk.net 3 points 4 weeks ago

It's not about your router. But rather if your ISP connects several households with the same IP.

Check this answer for more info