I’ve managed to set up a baikal server to sync my calendars and tasks instead of using a free cloud service provided by nextcloud. I’m able to reach it from beyond my local network, but this is all very new to me and I’m a little worried about what permanently leaving a port open for this.

I’m hoping to find some resources for securing this, before leaving it up all the time. I suppose as an alternative I can always only run it at home and only sync when I’m home but this seems less ideal.

Thanks a bunch for the help in advance. I really appreciate it.

  • CorrOPEnglish
    1·
    10 months ago

    So I got home and fixed my port-forwarding rule, but I can’t get my phone to connect. That aside, I’m now a bit lost as to how to get access to baikal , or anything else… I can’t seem to find any resources that explain how to do this either. Do you know of anything I can read to try to set that up?

    Edit: I sorted out reaching the baikal server from the VPN. Still working on getting my android phone to work with wireguard tho :/

    Edit: I apparently can’t read and mistyped a key value. Turns out everything has been working this whole time 🤦

    • BitSound@lemmy.world
      English
      2·
      10 months ago

      I unfortunately can’t really offer much advice here. I configured Wireguard on my phone by essentially copy/pasting the configuration from my laptop and changing the values as necessary like the public key and client IP address. Turned it on, it activated VPN mode in Android and everything started working.

      I guess make sure you haven’t mixed up your public/private keys, your server knows about the new device (and is restarted), and your phone is using the right IP address as basic troubleshooting steps.

      • CorrOPEnglish
        1·
        10 months ago

        I added a final edit where it turns out I just mistyped the public key and the rest of the config was completely fine. Oops lol. Thanks for your input on this I really appreciate it. Now final question. Since my server now works on a whitelist basis, it should be reasonably safe to leave the port open indefinitely going forward? If not, is there more I should consider doing to increase security?
        Thanks again :)

        • BitSound@lemmy.world
          English
          2·
          10 months ago

          Security is a gradient that depends on your threat model, etc, but unless you’re being targeted by a nation-state or something that should be plenty secure