Yunohost provides free domains (nohost.me, ynh.fr or noho.st) with Dynamic DNS, but i bought domain in Gandi. I use this simple script https://github.com/cichy1173/yunoDnsUpdater to update DNS if IP changes. I am thinking about buying fixed IP, but it is additional cost every month.
yes I know about the domains but port forwarding at my router is yet to be impossible for me. also I am unsure if I am ready to open my network to the outside yet.
do you rely on the built in safety measures or do you have additional security measures implemented?
Yunohost provides good set of tools to secure home server (Fail2Ban). Additionally, I use SSH on different port and with pubkey authentication. My Nextcloud instance uses geoblocker and 2FA. I am waiting for 2FA for Yunohost SSO (it should be added in Yunohost 11.x)
It is good to not make all apps available in open way. I have some of them hidden with Yunohost SSO system. I do not host apps, that can be used anonymously, for example copy-paste tools or Nitter.
Not all routers provided by ISP support port forwarding. It can be locked for you. If you have normal IP address (even dynamic) you should be able to open this ports. My friend had to call his ISP and ask for opening the ports. Another way is to buy second router and use first router in bridge mode (which I do, because I started using OpenWrt).
it is easy to use outside the network too. I use Yunohost for more than a 1 year
currently struggling to make use of zerotier to do that.
all the DNS stuff is like magic for me.
Did you take the route via a fixed IP and a bought domain?
Yunohost provides free domains (nohost.me, ynh.fr or noho.st) with Dynamic DNS, but i bought domain in Gandi. I use this simple script https://github.com/cichy1173/yunoDnsUpdater to update DNS if IP changes. I am thinking about buying fixed IP, but it is additional cost every month.
yes I know about the domains but port forwarding at my router is yet to be impossible for me. also I am unsure if I am ready to open my network to the outside yet.
do you rely on the built in safety measures or do you have additional security measures implemented?
Yunohost provides good set of tools to secure home server (Fail2Ban). Additionally, I use SSH on different port and with pubkey authentication. My Nextcloud instance uses geoblocker and 2FA. I am waiting for 2FA for Yunohost SSO (it should be added in Yunohost 11.x) It is good to not make all apps available in open way. I have some of them hidden with Yunohost SSO system. I do not host apps, that can be used anonymously, for example copy-paste tools or Nitter.
Not all routers provided by ISP support port forwarding. It can be locked for you. If you have normal IP address (even dynamic) you should be able to open this ports. My friend had to call his ISP and ask for opening the ports. Another way is to buy second router and use first router in bridge mode (which I do, because I started using OpenWrt).