sorted by: new top controversial old
Help configuring OPNsense VLANs? Tutorials I find seem to quickly become outdated. in c/selfhosted@lemmy.world
[–] 2 points 3 months ago

Thanks for letting me know! Glad it worked out in the end...

Yes my OPNsense guides need a bit of a re-write and more logical structure I think; I've received a lot of great feedback on them I need to incorporate.

Enjoy your new firewall ;)

  • permalink
  • fedilink
  • source
  • parent
  • context
    • How to Setup Authelia in Docker with SWAG Reverse Proxy (2026) in c/selfhosted@lemmy.world
    [–] [S] 1 point 4 months ago

    If you knew what was under the hood you would not say it's "just" customized nginx... It's more like customised, optimized and simplified.

    It has many enhancements builtin like automatic certificate generation and renewal, fail2ban, prebuilt optimized configs, and easily enhanced security with crowdsec and even geofencing.

    But made way easier than doing that separately with raw NGINX.

    It's much more friendly to pickup and run with then raw NGINX.

  • permalink
  • fedilink
  • source
  • parent
  • context
    • How much do you secure a home server that's only accessible with VPN? in c/selfhosted@lemmy.world
    [–] 2 points 4 months ago (1 child)

    It can be done, just carefully. You can definitely accidentally block yourself out if you set a firewall rule up incorrectly, or in higher precedence of order for example. OPNsense (like almost every firewall known) processes rules in a "top down" order. So you put your blocks at the bottom!!!

    Reverse proxy won't lock you out, essentially that's just slapping HTTPS on a webserver/service like Jellyfin, so you can access it without requiring a VPN.

    Here's a reverse proxy explainer, pt 2 is the actual setup!

  • permalink
  • fedilink
  • source
  • parent
  • context
    • How much do you secure a home server that's only accessible with VPN? in c/selfhosted@lemmy.world
    How to Setup Authelia in Docker with SWAG Reverse Proxy (2026) in c/selfhosted@lemmy.world
    [–] [S] 2 points 4 months ago

    Never heard of Rayfish but just googled, it's a mesh VPN so probably wouldn't want to push that through a reverse proxy to authelia, it would just slow it down....

    I personally use wireguard as my VPN, not tailscale or headscale or any of that but I do understand some people need something that can get around CGNAT or other issues.

  • permalink
  • fedilink
  • source
  • parent
  • context
    • Help configuring OPNsense VLANs? Tutorials I find seem to quickly become outdated. in c/selfhosted@lemmy.world
    [–] 1 point 4 months ago (1 child)

    What you could try is an inverse sense of match rule, which by default, allows access to the internet but not to other VLANs. This is what I do and is the standard I think that should be the default!

    If you read the LAN rules at the link there, it basically has you setup RFC1918 IP space as an alias, and then setup an inverse option the logic is:

    Anything that is NOT Private IP space - ALLOW!

    So outbound from that vlan/network/subnet to internet --> Allowed!

    Then you make separate rules to actually allow whichever VLAN access to the other, that you want.

    35DxwkWn6y7H2SQ.webp

  • permalink
  • fedilink
  • source
  • parent
  • context
    • How to Setup Authelia in Docker with SWAG Reverse Proxy (2026) in c/selfhosted@lemmy.world
    New Articles Dump! in c/selfhosted@lemmy.world
    Help configuring OPNsense VLANs? Tutorials I find seem to quickly become outdated. in c/selfhosted@lemmy.world
    Is they're an easy way to make my Jellyfin accessible outside of my home network for free? in c/selfhosted@lemmy.world
    How much do you secure a home server that's only accessible with VPN? in c/selfhosted@lemmy.world
    55
    How to Setup Authelia in Docker with SWAG Reverse Proxy (2026) (corelab.tech)
     

    SbTEwwlrjN5y7jq.webp

    How Authelia Performs Multi-Factor Authentication

    Authelia sits between your reverse proxy and the apps behind it, intercepting requests and performing auth checks before forwarding traffic, giving you true MFA that can be integrated with something like Google Authenticator, or Yubikey/Titan key, etc...

    Stop exposing unsecured apps. Learn how to deploy Authelia in Docker with a KeyDB backend and SWAG to enforce centralized Multi-Factor Authentication.

    Setting up Authelia can be a bit intensive at first, but very worth the payoff / time and effort!

    Disclaimers: I'm the author & run this exact setup, in production for myself. It's a "battle tested" setup, which has been in use for a few years now. Written & verified by a human! The header image is a composite of my Authelia MFA token page & AI generated infographic. NO ADS or affiliate marketing on page!

    Happy to chat in the comments!

    Help configuring OPNsense VLANs? Tutorials I find seem to quickly become outdated. in c/selfhosted@lemmy.world
    [–] 4 points 4 months ago (7 children)

    I'm late to the party, but feel my guides can help. I am biased towards them because I wrote them! ;)

    It's up to date for v26.x with OPN, that said these guides (3 part series) do need a bit of an overhaul but it does cover VLANs, LAGG/Trunks, DNSmasque and DHCP for each VLAN, with pictures etc...

    Core Lab OPNsense Guides

  • permalink
  • fedilink
  • source
    •
    25
    Canadian Identity Theft: Understanding the Data Leak Pipeline (2026) (corelab.tech)
     

    Stop thinking of identity theft as a "hack." Learn how corporate negligence and data aggregation fuel the Canadian black market, and why your info is at risk.

    This is part one of a Canadian series, teaching you how to fight back and react to protect your personal info and get your digital life back if you've been SIM swapped or your social media has been hacked!

    42
    How to Cut the Cord in Canada (2026): The Ultimate Guide (corelab.tech)
     

    Hello PieFed! I feel there's not enough content in regards to tech or self-hosting focused on us Canucks, so I started writing a blog last year. A lot of it fits into anywhere as it's all centered on self-hosting and cybersecurity but I specifically write some posts & chunks of posts, directly for my fellow Canadians!

    Welcome to Core Lab =) Operated & Self-Hosted in Canada, by a Canadian.

    I personally 'cut the cord' back in 2012 , tired of the high costs and limited options of Canadian cable. Over the last 14+ years, I’ve moved from trying basic OTA antennas (Mohu Leaf anyone?!) to advanced automated self-hosted setups using Plex/Jelly and/or Real Debrid integrations!

    I wrote this guide to save you the trial and error. It filters out the outdated advice and shows you exactly which hardware and streaming protocols actually work for reliable, high-quality streaming in Canada in 2026. Let me know if you have any questions or if this guide helped you out!

    Disclaimer: This post does contain some affiliate links, but no ads ! I'll never have popup or in-line ads...

    98
    How to Cut the Cord in Canada (2026): The Ultimate Guide (corelab.tech)
     

    Hello PieFed! I feel there's not enough content in regards to tech or self-hosting focused on us Canucks, so I started writing a blog last year. A lot of it fits into anywhere as it's all centered on self-hosting and cybersecurity but I specifically write some posts & chunks of posts, directly for my fellow Canadians!

    Welcome to Core Lab =) Operated & Self-Hosted in Canada, by a Canadian.

    I personally 'cut the cord' back in 2012 , tired of the high costs and limited options of Canadian cable. Over the last 14+ years, I’ve moved from trying basic OTA antennas (Mohu Leaf anyone?!) to advanced automated self-hosted setups using Plex/Jelly and/or Real Debrid integrations!

    I wrote this guide to save you the trial and error. It filters out the outdated advice and shows you exactly which hardware and streaming protocols actually work for reliable, high-quality streaming in Canada in 2026. Let me know if you have any questions or if this guide helped you out!

    Disclaimer: This post does contain some affiliate links, but no ads ! I'll never have popup or in-line ads...

    view more: next ›