this post was submitted on 04 Aug 2025
76 points (97.5% liked)

Selfhosted

52174 readers
485 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

hi everyone,

I was just about to self-host a Ghost blog but then was warned that my ISP might change my external IP address at any time, so I would need to pay for a static IP address.

Is that true?

(I'd not seen much about that in stuff I've looked up so far about self hosting)

you are viewing a single comment's thread
view the rest of the comments
[–] Prunebutt@slrpnk.net 4 points 2 months ago* (last edited 2 months ago) (3 children)

I could make this quick: Is your internet access behind a CG-NAT? If yes: you're gonna need a static IP.

[–] 3dcadmin@lemmy.relayeasy.com 6 points 2 months ago (2 children)

Not necessarily, Cloudflare tunnels, headscale/tailscale will sort that issue out amongst several other ways

[–] Prunebutt@slrpnk.net 1 points 2 months ago (2 children)

But how will a tailnet help for a blog? At some point, the https port needs to be open.

[–] herrvogel@lemmy.world 1 points 2 months ago

Tailscale funnel is made for this.

[–] 3dcadmin@lemmy.relayeasy.com 1 points 2 months ago

tailscale will tunnel through and you can set it to pass through https. Lots of different ways to achieve this, as long as you have control over the dns and are able to set https up it will work. This is why for me I still use cloudflare, you can even setup a subdomain through their tunnels and they act as a cdn. For example, I run a linkstack instance, send instance and much more

https://linkstack.relayeasy.com/@3dcadmin

[–] Paddy66@lemmy.ml 1 points 2 months ago (1 children)

I was going to use Cloudflare to sort this, but I'm uncomfortable how big they are getting / lack of competition in that part of the market. So we looked at Pangolin as an alternative, but it's a faff to self host.

Hence why we're back at exposing it straight out the back of Nginx Proxy Manager.

[–] 3dcadmin@lemmy.relayeasy.com 1 points 2 months ago

I get that.... fo me though as I have been using Cloudflare for many years I can't see any reason to change yet. That of course may change

[–] iii@mander.xyz 1 points 2 months ago (1 children)
[–] Prunebutt@slrpnk.net 2 points 2 months ago (1 children)

Care to explain what I got wrong?

[–] iii@mander.xyz 1 points 2 months ago (1 children)

Static IP is helpfull but not necessary. Even with NAT and a changeing IP there's options, such as:

  1. dynamic dns.
  2. Public reverse proxy or tunnel.
  3. Onion routing.
[–] Prunebutt@slrpnk.net 1 points 2 months ago (1 children)
  1. How do you open the https port behind a nas?
  2. That public tunnel needs at least a public IP address again.
  3. Ok, forgot that one. But then you're only accessible through Tor, isn't it?
[–] iii@mander.xyz 1 points 2 months ago (1 children)
  1. Port forwarding
  2. Yes, and there's services that do that for you
[–] Prunebutt@slrpnk.net 1 points 2 months ago (1 children)

You can't port-forward if you sit behind a nat.

[–] iii@mander.xyz 1 points 2 months ago (1 children)

Port forwarding was invented for exactly that

[–] Prunebutt@slrpnk.net 1 points 2 months ago (3 children)

Hou will you configure the ISP's NAT router to port-forward? You won't be able to reach the forwarded port if your ISP doesn't foward the port as well.

[–] Hawk@lemmynsfw.com 2 points 2 months ago

You can't, this guy doesn't know what he's taking about.

Port forward behind CGNAT won't get you out. Best bet here would be ipv6.

Tor would work. However, only over Tor obviously.

[–] iii@mander.xyz 1 points 2 months ago

Aah, ISP's NAT. Yes, in that context, it's correct that you can't port forward.

Perhaps you can STUN through, but unlikely to get a good port.

[–] Saik0Shinigami@lemmy.saik0.com 1 points 2 months ago (1 children)

ISP’s NAT

That has it's own name... CG-NAT. Thus why people are responding to you as if you're wrong. As you wrote it you are wrong though. But there's still answers like argo tunnels (if you are okay with cloudflare) and other similar solutions.

Or you can setup a vps and tunnel through that.

[–] Prunebutt@slrpnk.net 1 points 2 months ago (1 children)

Oh, I see. Sorry I was too dumb to research that term for the comment.

Or you can setup a vps and tunnel through that.

But then the VPS needs a static address.

[–] Saik0Shinigami@lemmy.saik0.com 1 points 2 months ago

But getting a static address for your VPS is likely much easier than getting it from certain ISPs.

For instance, Quantum Fiber doesn't support static IPs at all... But most VPSes can and do.

[–] Paddy66@lemmy.ml 1 points 2 months ago (1 children)

My router says it has NAT enabled (in the WAN settings section - for the internet connection)

[–] Prunebutt@slrpnk.net 3 points 2 months ago

It's not about your router. But rather if your ISP connects several households with the same IP.

Check this answer for more info