馃摳 Exposing Immich from a homelab with Tailscale and a small VPS

Getting a photo library online is one thing. Uploading a large video from outside your home network is another. I was exposing my home Immich instance through Cloudflare Tunnel, but a large-video upload ran into Cloudflare鈥檚 proxy upload-size restriction. I wanted to keep the photos at home while changing the path used to reach them. The solution: a small VPS as the public entry point, Tailscale to reach the homelab, and Caddy to forward requests to Immich. I used TierHive, which provides a managed HAProxy frontend and HTTPS certificates alongside its NAT VPS instances. ...

October 9, 2026 路 9 min 路 1799 words

馃攼 Free SSL certificates for your homelab with DuckDNS and DNS-01

If you like me have been wondering on how to have nice links in your homelab without having to pay for a domain and a certificate, this post is for you. Especially if you want to use a subdomain of a free domain like DuckDNS, you can get a free SSL certificate from Let鈥檚 Encrypt using the DNS-01 challenge. DNS-01 challenge The DNS-01 challenge is a way to prove that you own a domain by adding a specific DNS record. This is the most secure way to get a certificate as it doesn鈥檛 require any server to be reachable from the internet. ...

September 11, 2024 路 2 min 路 271 words