I would like some ideas or suggestions as I am not sure how to continue with self hosting.
I want to self host images and caldav, maybe documents later as well. These would need to be continuously available to PC clients and Android. There would be a handful of users maximum.
The obvious (?) solution would be Nextcloud, which would do everything I need.
My problem is that I have only one public IP address and the HTTP and HTTPS ports are already in use by Apache.
The second problem is that I already use wireguard to another location, and Android cannot connect simultaneously to several wireguard endpoints. At least as far as I know.
Below, I list the approaches I have considered and the problems / drawbacks I see.
Please comment if I am wrong about something here.
At the moment I am looking at option 4.
Any comments are welcome!
Option 1. Nextcloud AIO publicly available through HTTPS
It needs the HTTP & HTTPS ports which are in use. Otherwise, this would be the go-to for me.
Option 2. Nextcloud AIO through wireguard
I would have to switch between two wireguard instances on Android. There would probably be continuous connection errors and sync problems on apps that try to connect to either location (nextcloud and davx5 for example).
Setup would be a bit compilated for me. AFAIK, I would have to set up a local DNS, self made certificates and a reverse proxy for the Apache server.
Setup would be complicated for all other users as well and require wireguard and manually installed certificates.
Option 3. Nextcloud AIO with tailscale
Setup complicated like #2 and then some?
I have no idea if it works while using the android wireguard app for the other connection I need.
Option 4. Radicale and Ente publicly available
As far as I know, these run on special ports that are not 80 or 443.
Server setup would be slightly complicated.
Client setup would be simple.
Document sync I would have to figure out later (maybe just syncthing or otter setup?).
Can't you just use Apache as a reverse proxy and configure it to proxy to Nextcloud?
I understood NC needs ports 80 and 443, at least from the nextcloud aio installation doc
With a reverse proxy you can route connections to arbitrary ports. Just remap the ports in the docker containers if they run on the same machine, otherwise they'll refuse to start when the conflict is detected.
I have it set up like this. music.mydomain.net redirects to navidrome, video.mydomain.net to jellyfin, news.mydomain.net to miniflux, cloud.mydomain.net to Nextcloud (this one is on a VPS tho), and so on; those are all on different ports, but I never need to input it as it always goes over https 443.
Thank you and everyone else! Now I need to get a domain that allows subdomains
You can also use multiple duckdns.org redirections for free
Thanks, this is good to know!
Thanks for this. I have been looking for a replacement for an old subsonic fork that was long ago abandoned. Navidrome looks like a great option!
TBH lately I've been using Jellyfin for that as well, Navidrome is great when you use it with apps like Symfonium, but the web interface is not super. There's Feishin as an alternative frontend but it doesn't seem very mature and I'm not comfortable exposing it to the internet, reverse proxy or not.
Mine doesn't have 80, it has a reverse proxy on 443 when I'm using a subdomain, but there is an option to use a subfolder instead. (This is with nginx, not apache, but I would assume it's similar)
The thing that doesn't yet work for me is the redirect back after authentik login. (The login works, but just doesn't do it as seamlessly as I expect and I think it's a config issue)
I understood from here it shouldnt work
https://github.com/nextcloud/all-in-one?tab=readme-ov-file#are-other-ports-than-the-default-443-for-nextcloud-supported
Maybe you use another flavor and not the aio?
Edit oh you have 443 though, nvm!
In the docker-compose.yml for the AIO, you can specify the port that the Apache server runs on with
APACHE_PORT=XXXXThen you set your reverse proxy to proxy to that port. If you need some pointers about how to use a reverse proxy, ask away.