Dear fedi, today I'm looking at self-hosting (webserver, family nextcloud,...) from our home.
Situation: I got a big fat fiber entering the house and my isp provides both fixed ipv4 and ipv6coming in through a fritzbox. Behind that is an asus router for the home lan/wifi that has all boxen connected (nas, osmctv, laptops, phones) connected.
I'd like to properly secure this setup (modify if needed), exposing some services transparantly (!) for family members on the internet (notably nextcloud, maybe others), i.e. not changing configs on phones or laptops when outside the home.
How do I go about this? Can you share good (pref non corpo, no commercial solutions) blogs & guides to get me on the right track? Good pointers as well (I'm comfortable on the linux cli, scavenging manpages and sandboxing/testing stuff in containers/vm's). I'm mainly looking for good pointers on networking, routing, firewalling I guess..
