2
Ways to access a server behind CGNAT safely?
(alien.top)
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
For Example
We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.
Useful Lists
/r/Zerotier or /r/Tailscale
with the caveat that this entails installing a application on the client device that accesses the server & whitelist it - so workable if you're accessing your server using your own phone/laptop, not so much on a random company PC or your friends.
If you want 'random' externals accessing your server, you'll have to VPN out to a third party server that forwards ports, or host the entire thing in the cloud.
Check out Tailscale Funnel
You could also use zrok.io. It's an open source alternative which can be self-hosted or has a free SaaS. It also includes cool features like 'private sharing' (which means both sides can be private with no inbound ports). I work on the parent project.