Im sure this has been asked before i juat can’t find where it has been - Maybe need to work on how to search Lemmy better. But…
Id like to eventually self host some sevices that require external access. While I have IpV6 addresses my IPV4 is dynamic.
Whats the best free way to be able to point some domains/ subdomains I have to my external dynamic IP and keep it updated. Im running OpenWrt on my router. - So possibly should be posting there.
Free Dyndns services seem to be a bit crap. Do I need to pay for a VPS? (seems to defeat the point of self hosting)
Self hosting doesn’t mean you should host everything yourself at home, using a VPS you manage (so the data inside it is still yours) is also a viable option for selfhosting. I myself host some services at home and a few others in a VPS.
As for Dyndns, I’ve used a few providers over the years. DuckDNS is the one I’ve been using for 5 years or so and it’s not failed me once. Pretty happy with it.
Maybe you could have a duckdns pointing to your dynamic IP and your domains / subdomains with a CNAME pointing to the dyndns address?
I’ve used big names like ns1 and Cloudflare for free.
Many DNS providers have an API and are supported by various dynamicDNS clients. I use Cloudflare and the built in client on my Opnsense router.
OpenWRT should have a client too that supports a bunch of services.
Namecheap domains include a dynamic DNS application for free and it works well. Be aware that it only runs on Windows.
also keep in mind for people not on windows, namecheaps API only functions for business grade, and also is not clearly documented, there is a “dynamic dns setup page” but it isn’t up to date. I find myself trying to use openwrt’s DDNS pages for it but it still isn’t accurate, I am likely going to transfer elsewhere when im closer to the end of my lease. This API restriction also prevents you from easily automating your SSL process using letsencrypt as you are locked down to subdomain based entries instead of wildcard domains.
There are two options, one is tunneling (e.g. tailscale, cloudfare tunnels, or a VPS either with special software or plain old SSH port forward constant connection). The other option, the most popular answer (I think, influenced by how yoy asked) is Dynamic DNS or DynDNS (e.g. duck, hurricane, freedns, etc.) this second one is like the classic solution.
I think you got enough recommendations for several tunneling solutions.
Apart from that (and free DynDNS) you could also use a regular paid DNS provider. Some of them also offer DynDNS or an API. I think I saw some regular providers in the list of my DynDNS client on my router, next to the super cheap or free ones.
If you go down the VPS route, a headscale server on a cheap $3.50 VPS would be the way to go. Wouldn’t even have to deal with IP addresses at that point, while still being able to self-host all your services, with the cheap VPS being a glorified switch/firewall.
I’ve been using No-IP free plan for years without issues. Inputted the credentials to my routers DDNS client and then basically forgot about it. Free users need to confirm their account once a month via email but that’s just one click.
If your domain registrar happens to have an API to update DNS entries, you could implement DDNS yourself by writing a simple automated script to check the external IP (e.g. via ipify.org) and if it’s changed from the last check then call the API to update the DNS entries.
No-IP
Don’t recommend that. There are plenty of better alternatives such as https://freedns.afraid.org/ and https://www.duckdns.org/ that aren’t run by predatory companies that may pull the plug like DynDNS did.
Sure. I’m not recommending anything, just stating what has worked for me. For simple use cases, I think most of the DDNS services are pretty much the same anyway and it’s easy to switch to an another one if one stops working for some reason.
Yeah been using No-ip free but I worry that one day I will forget to confirm and ill ge cut-off.
If you can avoid it, don’t open ports in your firewall, don’t publish your home IP address, and keep everything behind a VPN. If only you and your family will be using these services, go with Tailscale or one of its competitors. Otherwise, VPS or cloudflare tunnel/competitor.
Don’t expose your services directly to the internet. Instead rent a VPS and the use Wireguard to bring the traffic back home. In your home network your services should be in there own VLAN and everything should be isolated and sandboxed. Everything has the potential to be compromised so always practice least privilege and defense in depth.
Or just set up your home network and services properly. Ideally with reverse proxies and maybe a proper DMZ.
I use TailScale and their free Personal plan.
Disclaimer though: I haven’t done much due diligence on it. It was easy to install when I first started self hosting with Umbrel and I use it so rarely that it’s good enough for my usage.
I want to be independent. My understanding is that Tail scale relies on a service they run or a endpoint you run on a VPS - Is that right?
Oh right, yeah you’re dependent on their service.
Get your own domain, find a free DNS service that provides an API, and it becomes a simple matter of updating a DNS
Arecord whenever your IP changes.Here’s a starting point: https://community.letsencrypt.org/t/dns-providers-who-easily-integrate-with-lets-encrypt-dns-validation/86438
Don’t use a DynamicDNS service, they’re usually crap and they make you depend on a domain you don’t own.
I use digital ocean as dns host. They have an API, so I check my IP with a script and update if needed.
I’m using cloudflare as my nameserver and the free API seems to work just fine with ddclient.
ddclient paired with a supported provider.
