I have setup CloudFlared Tunnel on my unraid server. I am currently using it to host a few websites.

I want to open Immich up to the web, so I can view my photos and videos away from home, as well as upload photos to my server. Is CloudFlared Tunnel good enough as long as I have good Immich login credentials?

Thanks!

  • Moonrise2473@feddit.it
    link
    fedilink
    English
    arrow-up
    14
    ·
    1 year ago

    It’s not good because immich doesn’t support chunked uploads yet, so you couldn’t upload anything bigger than 100mb (or 500 mb with a pro plan for $240/year)

    From desktop browser it appears you can upload files bigger than that but it’s because they’re cheating cloudflare by saying in the header “file size unknown yet”, then it sends a file bigger than the limit. Cloudflare is nice and doesn’t cut the communication once past the limit… yet.

  • keyez@lemmy.world
    link
    fedilink
    English
    arrow-up
    8
    ·
    1 year ago

    A cloudflare tunnel would be good enough but a VPN would probably be a better idea.

    • Polar@lemmy.caOP
      link
      fedilink
      English
      arrow-up
      3
      ·
      1 year ago

      Thanks! I didn’t realize how dead simple, and free, it was to use the WireGuard app on Android and built in Unraid VPN settings to create a VPN tunnel.

      It took me 2 minutes and it’s a simple toggle to access my photos as if I was at home. Incredible!

    • jws_shadotak@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 year ago

      Is there an easy way to host a website from a VPN? Wouldn’t I have to fiddle with ports and such instead of just using 80 and 443?

  • Decronym@lemmy.decronym.xyzB
    link
    fedilink
    English
    arrow-up
    7
    arrow-down
    1
    ·
    edit-2
    1 year ago

    Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:

    Fewer Letters More Letters
    HTTP Hypertext Transfer Protocol, the Web
    SSL Secure Sockets Layer, for transparent encryption
    VPN Virtual Private Network

    [Thread #81 for this sub, first seen 25th Aug 2023, 22:55] [FAQ] [Full list] [Contact] [Source code]

  • starcrossed_hero@lemmy.world
    link
    fedilink
    English
    arrow-up
    3
    ·
    1 year ago

    There are some things you could do relatively easily to have more peace of mind.

    With Cloudflare Tunnel you’re at least only allowing port 80/443 to hit your server already. You could consider also configuring Cloudflare to block countries outside your own to limit exposure.

    You’d definitely want to have SSL configured for your site, or better yet, have it (and your other services) run behind a proxy that supports SSL.

    It is also typically pretty easy to implement fail2ban so that you can limit brute force attempts to login on any of your exposed services.

    I guess lastly make sure you’ve got backups elsewhere of these photos and videos.

    • ohmesocorny@discuss.online
      link
      fedilink
      English
      arrow-up
      6
      arrow-down
      1
      ·
      1 year ago

      In my experienc, using cloudflare tunnel, I don’t even open 80/443. That’s the beauty of the tunnel - no open ports (except 22 for ssh).

      • starcrossed_hero@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        ·
        1 year ago

        Yeah, exactly. That’s what I was trying to convey with that comment as well. The only thing necessarily exposed is whatever you’re running on the only port(s) that the tunnel uses.

      • Chaphasilor [he/him]@feddit.nl
        link
        fedilink
        English
        arrow-up
        3
        ·
        1 year ago

        They probably meant that through the tunnel you can get to one of these ports, because the HTTP requests are forwarded there. Should only work for HTTP(S) though

  • KravenTheHunter@lemmy.browntown.dev
    link
    fedilink
    English
    arrow-up
    2
    ·
    1 year ago

    So i am seeing that for uploading files, a VPN is a better option. But for simple viewing of photos, there shouldn’t be any issues using the tunnel right?

    • Polar@lemmy.caOP
      link
      fedilink
      English
      arrow-up
      2
      ·
      1 year ago

      I setup the VPN tunnel. It’s a toggle switch on my phone that allows me to access my network as if I was home. It’s free (using wireguard app), and way more secure, as my phone is the only device allowed to access it.

      Downside is that I need to add devices manually if I wanted, but upside is that it’s super secure and not directly open to the web via domain.