I’ve just started hosting stuff and i’ve been using frp’s stcp to make stuff accessible when i’m at school. I was wondering if I should bother setting up/switching over to wireguard which is apparently the way to go?

  • Possibly linux@lemmy.zip
    link
    fedilink
    English
    arrow-up
    0
    arrow-down
    1
    ·
    2 months ago

    You didn’t expose it to the internet right? Right?

    Use Netbird and a network share. I don’t know what stcp is but I would go with SMB or syncthing

          • Possibly linux@lemmy.zip
            link
            fedilink
            English
            arrow-up
            0
            ·
            2 months ago

            You don’t need ACLs for small stuff (access control lists, they are used for least privilege) all you need to do is to install the client in each machine and then those machines can talk as if they were on the same network.

            If you wanted to access device C from device B running Netbird you could also use the routing feature to route traffic as if you were on the local network. You also can use the VPN feature if you want to get the same experience as if you were at home.

      • Possibly linux@lemmy.zip
        link
        fedilink
        English
        arrow-up
        0
        arrow-down
        1
        ·
        2 months ago

        Anything on the internet gets hammered. As soon as there is any sort of vulnerability you are compromised.

        You don’t need to take that risk

    • seang96@spgrn.com
      link
      fedilink
      English
      arrow-up
      0
      ·
      2 months ago

      From the link in the post it’s a reverse proxy backed by terminos which is a secure OS for kubernetes and is really good, so I imagine this proxy is also really good. So OPs setup is already likely fine as is.

  • Moonrise2473@feddit.it
    link
    fedilink
    English
    arrow-up
    0
    arrow-down
    1
    ·
    2 months ago

    never heard about stcp nor i see something called like that in their github repository

    Does it have authentication?

    For safety i’d add an additional layer of authentication. Easy way: cloudflare access + cloudflare tunnel; hard mode: authelia + a reverse proxy