I recommend deSEC.io, it’s free. They offer both full DNS hosting (so you can update the A/AAAA records for one of your own domains through their API) and dynamic DNS with subdomains under .dedyn.io. Both variants are widely supported, for example OpenWRT and ddclient include support out of the box.
If you choose to use them for DNS hosting I should mention that deSEC is a German service with a mission similar to Let’s Encrypt, only for DNS: they’ll host anybody’s DNS for free on one condition, that they enable DNSSEC. They generate and maintain it for you, you just have to enable it at your registrar (which amounts to copy-pasting the keys). (If you just use .dedyn.io for DDNS you don’t have to worry about this.)
But I would like to add that namecheap has coupons for the first year. So you can register a new cheap domain every year
So also it’s probably a good idea to register it from nc and then transfer to cloudflare
edit: lol, i’m even transferring some of my domains to cf right now (although cf is not the company I wish to trust, but namecheap is not one of them too)
In addition to all of the suggestions here you can easily do this with almost all major DNS providers today like Cloudflare and AWS Route 53, there are many community containers and scripts to keep the record in sync depending on what else you are using on your network.
The original project was archived so I added a bit to avoid pointless IP updates and then stole a Docker image build from another project and combined it in.
There’s a writeup out there where you can use the GoDaddy API to update your actual DNS IP every time your external IP changes. Not free, but works pretty well.
Yes ISPs do assign IPv6 blocks via Prefix Delegation, the thing is that Prefix Delegation is done over DHCP. They’ll assign a block and if your router/device is restarts they’ll just give you a new prefix. In some even more annoying cases you can even get a new prefix whenever the lease expires.
Not if you use a Hurricane Electric tunnel for ipv6 transit. My ISP hands out V6 addresses and I still use HE so I get a stable, globally routable /48 that moves with me (I had to switch ISPs recently and I just had to update my tunnel and everything just worked).
True, but that goes back to the irony of “I want to selfhost, and therefore I need a service provider…”, in this case HE. And won’t take of the IPv4 issue, we can’t just assume every network we use to connect to a home setup will be IPv6 capable. At that point you can just pick a Cloudflare tunnel and have it all working.
If it’s just for personal use, Tailscale is dead simple. But it doesn’t use your domain; it assigns permanent Tailscale IPs to your nodes. And once you’re connected, it allows you to use your local IPs.
If you want a domain to point to your stuff, I found CloudFlare Tunnels to be very easy to set up. I use it for services that I want to share with others, like Overseerr.
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !selfhosted@lemmy.world
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.
Rules:
Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.
No spam posting.
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it’s not obvious why your post topic revolves around selfhosting, please include details to make it clear.
Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
No trolling.
Resources:
selfh.st Newsletter and index of selfhosted software and apps
deleted by creator
I recommend deSEC.io, it’s free. They offer both full DNS hosting (so you can update the A/AAAA records for one of your own domains through their API) and dynamic DNS with subdomains under
.dedyn.io. Both variants are widely supported, for example OpenWRT and ddclient include support out of the box.If you choose to use them for DNS hosting I should mention that deSEC is a German service with a mission similar to Let’s Encrypt, only for DNS: they’ll host anybody’s DNS for free on one condition, that they enable DNSSEC. They generate and maintain it for you, you just have to enable it at your registrar (which amounts to copy-pasting the keys). (If you just use .dedyn.io for DDNS you don’t have to worry about this.)
Thanks for mentioning desec.io! I’ve read about it in c’t a few years ago, but didn’t find it a few months ago.
Duck DNS
quack 🦆
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:
[Thread #336 for this sub, first seen 4th Dec 2023, 15:35] [FAQ] [Full list] [Contact] [Source code]
deleted by creator
deleted by creator
deleted by creator
deleted by creator
I’ve been happy with DuckDNS. Free, simple, and reliable.
Buy a domain from Cloudflare and use your firewall (pfSense, OPNsense, etc) to do the dynamic DNS updates for you.
No need to buy the domain from cf, you can just set nameservers
True, but there are no extra costs added to domains on Cloudflare
Hmm, you’re actually right
But I would like to add that namecheap has coupons for the first year. So you can register a new cheap domain every year
So also it’s probably a good idea to register it from nc and then transfer to cloudflare
edit: lol, i’m even transferring some of my domains to cf right now (although cf is not the company I wish to trust, but namecheap is not one of them too)
Similar to what I do. I just have a script that triggers on IP change directly on my router.
In addition to all of the suggestions here you can easily do this with almost all major DNS providers today like Cloudflare and AWS Route 53, there are many community containers and scripts to keep the record in sync depending on what else you are using on your network.
For a simple dynamic DNS, I have been using https://www.duckdns.org/ for a few years and been happy so far
If you use Porkbun, there’s a project that I’ve personally forked and adjusted a bit for dynamic DNS updates: https://github.com/Dasnap/Porkbun-Dynamic-DNS
The original project was archived so I added a bit to avoid pointless IP updates and then stole a Docker image build from another project and combined it in.
There’s a writeup out there where you can use the GoDaddy API to update your actual DNS IP every time your external IP changes. Not free, but works pretty well.
I did exactly this in https://github.com/Sudneo/Home-ddns, and it works pretty OK for me for more than a year
I think Cloudflare DNS works too and it’s free.
The modern solution would be buying a domain and pointing the AAAA-record to your server’s ipv6 address.
… that may change at any time.
IPv6 typically assigns blocks to endpoints, not single WAN IPs (ie there is no NAT).
Changing this often would be absolute chaos for all connected devices, even if they’re configured correctly.
Yes ISPs do assign IPv6 blocks via Prefix Delegation, the thing is that Prefix Delegation is done over DHCP. They’ll assign a block and if your router/device is restarts they’ll just give you a new prefix. In some even more annoying cases you can even get a new prefix whenever the lease expires.
If your provider keeps changing your ipv6 prefix, then you still need dyndns.
With a static prefix, you don’t.
No I just have a service that waits for the up to change and when it does it runs a script that updates my AAAA record.
Not if you use a Hurricane Electric tunnel for ipv6 transit. My ISP hands out V6 addresses and I still use HE so I get a stable, globally routable /48 that moves with me (I had to switch ISPs recently and I just had to update my tunnel and everything just worked).
True, but that goes back to the irony of “I want to selfhost, and therefore I need a service provider…”, in this case HE. And won’t take of the IPv4 issue, we can’t just assume every network we use to connect to a home setup will be IPv6 capable. At that point you can just pick a Cloudflare tunnel and have it all working.
If it’s just for personal use, Tailscale is dead simple. But it doesn’t use your domain; it assigns permanent Tailscale IPs to your nodes. And once you’re connected, it allows you to use your local IPs.
If you want a domain to point to your stuff, I found CloudFlare Tunnels to be very easy to set up. I use it for services that I want to share with others, like Overseerr.