What I suggest/have done:

1. Rent a cheap VPS in a non-five eyes country that comes with a static ipv4.

2. SSH on random port with certificate auth only. No root, no password auth.

3. setup WireGuard server with random port.

4. firewall block all incoming except ssh and WireGuard port at first.

5. set home server to connect via wireguard as sole client to VPS.

6. individually add any ports you want to go to the home server from the internet as NAT forwarded ports. Basically WWW -> VPS -> Home.

7. have a separate WireGuard VPN for outgoing from the home server.

8. profit?

But it’s crazy complicated. At least it was for me. Not for the faint hearted imo.

Thanks for this! I’ll read up on it.

The name unfortunately put me off from looking into it before. Basically anything with ‘coin’ in it just makes my brain go to crypto scam automatically these days I think.

You are 100% correct. The issue isn’t the infrastructure per se, but the usage of it.

By decentralizing, I guess I mean finding a way to remove the ability for a mega company like Google from being able to dominate the playfield.

The percentage of internet users that can or will bother to run their own DNS is way too low.

How easily DNS can be manipulated by any network for the average end user is the blessing and the curse it seems.

Can someone considerably smarter than me, with time to spare, please just find a way to federate/decentralize DNS.

I can fathom that it is complicated, maybe even impossible in the current setup, but the internet we all grew to love dies a little bit more each time the mouth breathers try to restrict it on behalf of capitalism.

Maybe remembering ip addresses can fill the void of not having to remember phone numbers anymore?

I don’t think this is as shocking as that headline wants it to be.

Other countries have proven this repeatedly, along with the fact that forced static learning and homework at young ages isn’t the way. Learning through play is far more effective.

Good luck convincing the old boots that make the decisions these days though.

Not sure if anyone else mentioned this, but you can just redirect traffic on your local LAN with an ad blocker like pihole ( I currently use adguardhome podman instance )

Basically, it rewrites any calls to your outside domain from within your local network, back to your local web server. As long as the site is setup with the certificate there, you’re good.

Then setup a nginx reverse proxy and you’re golden. Regular site outside LAN, internal site inside LAN.

Edit: spelling

Probably totally unrelated, but I find it interesting that Canada suddenly lifts the electricity surcharge right when the US suddenly decides to support Ukraine again.

Like I said, most likely totally unrelated, but the timing is a bit suspect. That surcharge of 25% would have netted Ontario something like 400K a day from the US. Not economy ending, however I can imagine a lot of residents and business owners in the affected states would be mega unhappy about it.

I feel like this should be a quarterly post. Really liking all these setups.