Anytime anywhere acces

[Dan Nadrchal]

I have a brother that lives in Norway. Will there be a way to share my storage with him? We (as a family) want to use this server to back up memories and similar things and we want it to be accessible by anyone, even though they are not on the same network. 
thank you for replying. 

[arvinpw]

that is what i was waiting for too
hopefully they implementing soon

[Goodyear]

Looking to do the same thing. Having the ability for the family to all have access to the server.

[0xPldn]

+1 for Cloudflare integration

[speedking456]

5 minutes ago, 0xPldn said:

+1 for Cloudflare integration

Cloudflare is awesome, and I definitely want to see native support for Tunnels. It is fairly simple for a technical person to setup but it would be nice to have a wrapper within HexOS for like a one-click setup. Basically you buy a domain in Cloudflare, link your account to HexOS and it will perform the necessary config to setup the tunnel, route application services to your domain, and apply ACLs based on what you already have in HexOS. Although, you do need a domain to use Cloudflare Zero Trust.

Tailscale is another option, and does not require a domain to use. As of right now the docker app already runs great. I imagine they could add a simple wizard—the current setup process has a lot of options but only requires an auth key to be set for it to work.

[BlueAsphalt]

22 hours ago, speedking456 said:

Cloudflare is awesome, and I definitely want to see native support for Tunnels. It is fairly simple for a technical person to setup but it would be nice to have a wrapper within HexOS for like a one-click setup. Basically you buy a domain in Cloudflare, link your account to HexOS and it will perform the necessary config to setup the tunnel, route application services to your domain, and apply ACLs based on what you already have in HexOS. Although, you do need a domain to use Cloudflare Zero Trust.

Tailscale is another option, and does not require a domain to use. As of right now the docker app already runs great. I imagine they could add a simple wizard—the current setup process has a lot of options but only requires an auth key to be set for it to work.

As far as i now (correct me if i'm wrong), using cloudflare tunnels for heavy media is against their tos and you need a paid tier for that. Many people who used it for their cctv got their accounts banned

[speedking456]

5 hours ago, BlueAsphalt said:

As far as i now (correct me if i'm wrong), using cloudflare tunnels for heavy media is against their tos and you need a paid tier for that. Many people who used it for their cctv got their accounts banned

Yeah I definitely wouldn’t run plex on Cloudflare Tunnels. It would be worse than a traditional VPN, Tailscale, or even just opening up a port, as you are bandwidth limited over Tunnels.

Mainly I use Tunnels as a reverse proxy for any web apps I’m hosting. One example is my Minecraft server management portal, plus a few development sites.

You can also use Cloudflared as a VPN (kind of), using WARP as the client. There’s limitations with it, and in my testing it’s much slower than any direct VPN connections.

For sharing amongst friends or family, Tailscale is the better solution, the free tier is insanely good for what you get.

[Dan Nadrchal]

So for photos and similar a VPN would be a great option. What would be a good option for plex or other movie streaming?

[Dan Nadrchal]

What about a public static IP adress and creating SMB share. Does that work now or is it even possible?

[Mobius]

On 12/2/2024 at 9:53 PM, speedking456 said:

Yeah I definitely wouldn’t run plex on Cloudflare Tunnels. It would be worse than a traditional VPN, Tailscale, or even just opening up a port, as you are bandwidth limited over Tunnels.

Can this be done with any vpn? I already pay for proton vpn so it would be great if i could just use that

[arvinpw]

i just testing Tailscale, i'm just blown away how easy it is.
just login my tailscale account on server, and install tailscale on my PC and laptop.
just like that, and i'm already able to access my shared folder via SMB, even using //servername
awesome

[markrieder]

I want remote access to be simple and safe even for older family members who are not technically proficient. They will not register in some VPN for their access to work. They just want to open a plex or immich and at most ask for an ip address and let it work. How to do it? Of course, they don't live under the same roof and the most they can do is write an IP address or a web domain.

Edited December 16, 2024 by markrieder

[Dan Nadrchal]

I really dont know how simple is Tailscale going to be for everyone. I have not yet set it for my parents. I have been making it work for past 2 days, and got it working. My brother curently lives in Norway and can acces the data physicaly located in Czech Republic. 

Here is how:

Go to Tailscale · Best VPN Service for Secure Networks and download the client for your PC/Mac or find it in APP store/Google play store. 

Log in with your prefered identity provider. 

You will need two (2) devices to make it work. After you have logged in into two (2) of your devices you will be taken to your command deck.

Click on Settings. Then go to Keys - and Generate auth key

Click Generate Key - you can add description at the top. Then copy the key. 

Open HexOS Comand deck and find Tailscale at the apps - log in to TrueNas.

 

Se

Set your time zone, hostname to what ever you want and paste the Auth Key you have generated in Tailscale.

I use my server as an Exit Node as well - I'm trying to run Pi-hole on my Nas but just to a little succes. The Exit Node box is not filled in. If you want to use your server as and Exit Node you have to check it.

Leave the rest as is and click Save at the bottom.

That is it. When you want to get to your data just copy the ip of your device in the tailscale menu and add \\ in front of it. You will be prompted to log in into the drive so put in your user name and password you have created in HEXOS and you are good to go. This works on windows and iOS - i have set it up as a server in my Files app and in the VLC player to play media. I do not have different operating systems to confirm that it works there as well but i imagine it does.

 

Hopefuly someone will find this helpful. I never used any of this and it took a lot of time to figure it out. Mainly the \\ before the IP adress. Im just u noob - i know :D. But it works without a problem. You will just be limited by your ISP - and the upload bandwith. With just 20Mb/s i cannot stream in 4K. But 1080p usualy works fine.

Edited December 24, 2024 by Dan Nadrchal
forgot last paragraph

[markrieder]

Hexos promises remote access from anywhere. I wonder how they intend to achieve this. Maybe they integrate their own vpn with automatic port allocation for other apps or maybe they play around with a reverse proxy. Anyway, if I want to give access to 20 people, I can't physically go to each one and set up access. From this point of view, it is impractical.

[Dan Nadrchal]

that is true. i know i dont have that many people i want to share with. As i said in my first post i want to do this for my family to have acces to all our data. It got frustratingli hard to find something. Some photos are on One drive some are on old external drives, some are on CDs and DVDs. This is a way for us to have all of this accesible anywhere in anytime when we have acces to intertnet. its sufficient for our use.

[markrieder]

For example, such UGREEN Nas has a mobile or desktop application that serves for remote access via a generated token. Although I did not understand how it is with granting access to a friend, and the fact that I have access to the interface through this token does not mean that I have remote access to the installed applications. I don't know how it works, I just noticed that new systems like UGREEN or FNOS go this way. It's probably a better way than Tailscale, which I would have to manually set for each friend or family. In addition, I noticed that these systems have Internet applications such as a gallery, a movie application and a file manager in the user interface, so through this mobile application and token you have access to everything directly from one interface and you do not have to open 10 applications separately.

[Kong7014]

Yup +1 vote for this.  Don't need fancy apps. Just want to access my stuff from anywhere securely.

[Sayborg503]

Currently use Synology hardware just because its easy for a non techy person to just download the app (DS-photo/Drive/DS audio) enter your server name/user-password. Boom your done, its the only reason why i bought it. A trueNAS server setup  hosts all my other needs. if hexOS provides something like it, it will be no brainer for me, its the only reason holding me back from going full hexOS. 

[dinecoj]

A  good example of something similar is Nabu Casa's Remote UI for Home Assistant. For $6.50 / month my HA instance can be accessed from anywhere with ease. This is helpful for enabling the non-tech-savvy family members to interact with HA.

Not sure exactly how this would work with SMB shares and a NAS, but the HA model seems to be working well and is appreciated in the community.

Edited January 1 by dinecoj
Add sentence

[markrieder]

10 hours ago, dinecoj said:

Dobrým príkladom niečoho podobného je Vzdialené používateľské rozhranie Nabu Casa pre domáceho asistenta. Za 6,50 $ / mesiac je moja inštancia HA ľahko dostupná odkiaľkoľvek. To je užitočné na umožnenie interakcie s HA rodinným príslušníkom, ktorí nie sú technicky zdatní.

Nie ste si istí, ako presne by to fungovalo s akciami SMB a NAS, ale zdá sa, že model HA funguje dobre a komunita ho oceňuje.

Nabu Casa is remote access for the Home assistant, and we mean remote access for HexOS. Even if it worked, there is no law that prohibits a third party, for example Nabu Casa, from looking into my privacy. Man is a curious creature, and Nabu Casa has stated in its conditions that it can provide access to state authorities and the government. That doesn't sound like 100% anonymity to me.

[markrieder]

On 1/1/2025 at 1:23 PM, markrieder said:

I rather had in mind access via the ID link or DDNS server. I would like to see this in HexOS.