So…in a short sentence…the title. I have a server in a remote location which also happens to be under CGNAT. I only get to visit this location once a year at best, so if anything goes off…It stays off for the rest of that year until I can go and troubleshoot. I have a main location/home where everything works, I get a fixed IP and I can connect multiple services as desired. I’d like to make this so I could publish internal servers such as HA or similar on this remote location, and reach them in a way easy enough that I could install the apps to non-tech users and they could just use them through a normal URL. Is this possible? I already have a PiVPN running wireguard on the main location, and I just tested an LXC container from remote location, it connects via wireguard to the main location just fine, can ping/ssh machines correctly. But I can’t reach this VPN-connected machine from the main location. Alternatively, I’m happy to listen to alternative solutions/ideas on how to connect this remote location to the main one somehow.

Thanks!

  • Im_old@lemmy.worldEnglish
    7·
    8 months ago

    I’m self hosting headscale (foss implementation of tailscale control server) for this scenario. Works great!

    • iturnedintoanewt@lemm.eeOPEnglish
      2·
      8 months ago

      THanks…I haven’t tried Tailscale yet, I think I’ll get the “easier” commercial version just yet for this. Still learning on this.

      • Im_old@lemmy.worldEnglish
        3·
        8 months ago

        I’ve been told that zerotier is even better. Haven’t tried it myself (it looks more complicated to selfhost) but the guy suggesting it knows waaaaay more than me on these things. Just if you want to look into another option.

        For what it’s worth (from a random guy on the internet) selt-hosting tailscale is quite easy! 🙂

  • just some guy@sh.itjust.worksEnglish
    3·
    8 months ago

    Can the ISP at the remote location remove your remote location from the NAT? I have a similar issue where sometimes it’s will reset and my services are inaccessible. A quick call to support usually has the problem fixed in a few minutes.

    • iturnedintoanewt@lemm.eeOPEnglish
      1·
      8 months ago

      I…logged a ticket with them, they promised they’d get back to me within 48h. I’m not holding my hopes too high.

      • just some guy@sh.itjust.worksEnglish
        1·
        8 months ago

        That’s unfortunate you have to put in a ticket. They should be able to help you with this during a 5-10m phone call. Hopefully they get to your ticket in a timely manner

    • iturnedintoanewt@lemm.eeOPEnglish
      1·
      8 months ago

      Thanks…I use my own home server, so I’d try to avoid the VPS part if I can, and directly re-address it to the home server, as I already have that one with a working fixed domain etc.

  • r_thndr@lemmy.dbzer0.comEnglish
    1·
    8 months ago

    Can the ISP offer dedicated IPv4 addresses? We had a similar issue with the new rural fiber provider. I spent hours tinkering and researching only to finally call support.

    15 minutes and $2/mo later it’s all taken care of. I have a direct IP and no maintenance nightmare that I have to sacrifice a goat to the printer gods and pray for mercy to make work*

    *when it wants to