Opening home server apps without a VPN raises access questions
Several services need to be reachable from the public internet, but without requiring a VPN. worked before, but it was hard for less technical people to use.
Some services currently run on a VPS with Caddy acting as a , while others run inside a homelab. The main choice is whether to move to Pangolin or add an tool such as Authelia.
A key concern is how would work for services with their own apps, such as for Bitwarden or Immich. also needs a clear method, such as IP rules, rules, SSO, or another setup.
Key points
- The goal is public internet access without requiring a VPN.
- was usable but too difficult for non-technical users.
- Some services already sit behind Caddy on a VPS.
- Pangolin and Authelia are being considered for .
- Apps such as and Immich may need special testing with external .