this post was submitted on 31 Jan 2024
162 points (97.6% liked)

Selfhosted

38768 readers
370 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 39 points 6 months ago (2 children)

A good move!

I’m surprised they didn’t codify “.lan” though since that one is so prevalent.

[–] [email protected] 9 points 6 months ago (1 children)

Seconding the other comment, lots of orgs picked .lan and then over the last few years have moved things into the cloud and .lan has become a meaningless soup since half the shit isn’t even on local network. Now it just means “needs a vpn or ztn to talk to”

Luckily my last three orgs finally bought a second domain for private dns. It’s quickly becoming a pattern that myorg.com owns myorg.tech or whatever for private traffic. Domains are cheap as fuck compared to everything else a business spends money on, it’s really silly how many people are using hacks for this

[–] [email protected] 1 points 6 months ago (1 children)

I think needing a VPN to access the internal network is a good practice. And if you're going to be used a VPN anyway, I don't see why you wouldn't use a "fake" TLD like .lan for internal stuff, after all it's just simple DNS rules.

[–] [email protected] 1 points 6 months ago

VPN is inherently not zero trust. You really should be moving to ZTN based tools

[–] [email protected] 3 points 6 months ago

It's used in many cases where the machine may not be on the LAN and LAN is a technical term. "Internal" is not and to me signifies that it's "not public" aswell as probably managed by someone, well, internally at the entity you're with.