view the rest of the comments
Selfhosted
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil.
-
No spam.
-
Posts are to be related to self-hosting.
-
Don't duplicate the full text of your blog or readme if you're providing a link.
-
Submission headline should match the article title.
-
No trolling.
-
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
-
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
That would depend on your deployment set up. I do not do that, but many people do. I have a very bespoke ingress route that I coded myself. It consists of a serverless cloudflare edge worker to catch emails, break them into a JSON that is sent over a tunnel to cloudflared as a post. This post is directed at containerized python program that rebuilds the email and that container is the only thing with access to deliver mail to the container running stalwart.
The reason I do this is not security though. It was a personal project more or less to see if it could be done and if it was reliable. Particularly to see if i could make a secure delivery method to bypass my ISPs CGNAT without paying for and maintaining a VPS. So far so good. And it has no monthly fee.
Most people I know of (with CGNAT limitations) are just using a cheap VPS with open ports and then the VPS either has the email server there or a tunnel to the SMTP server. If you have a static IP or a DDNS set up where you can properly port forward, that works too.