I have a similar use-case.

What I did for the VPN was to use Wireguard. I configured it using wg-easy, and it’s, well, very easy. What your need to do is:

1. Install wg-easy via Docker.
2. Configure it and create a profile.
3. Open ports in your router to allow port-forwarding the Wireguard tunnel.
4. (Optional). Install a Wireguard client on your cellphone. I use “WG Tunnel”, a FOSS client. Note that the author of the app is a bit of a religious nut, If you care about that kind of stuff.
5. Scan the profile QR generated in wg-easy on your WG Tunnel.
6. Increase the “PersistentKeepalive” parameter to something like 30 seconds in WG Tunnel. This will increase the tunnel’s resiliance to disconnections due to small packet losses; without that, Jellyfin/Navidrome will constantly disconnect.
7. Open Navidrome/Jellyfin, and done :)

Let me know If you have any questions, glad to help.

Yeap, that’s pretty much it.

Note that the link you shared has a Google’s user tracker (the part after the ?is links to your identity to create a profile of who you connect with). The clean version is https://youtu.be/qlcVx-k-02E

I have that exact setup. Let’s suppose you want to use layzer.lan as your domain. The way I did it:

1. Make a DNS record that maps *.layzer.lan to your private IP (let’s say it is 192.168.0.10). You can do this by either manually editing your local DNS resolver config file, or hosting a DNS server and adding a a new entry. I did the later, and chose AdGuard for that. Either option will make your PC underestand that going to any subdomain *.layzer.lan means going to 192.168.0.10.

2. Use a reverse proxy. I use nginx-proxy-manager, and added a proxy host for each service you want to access with the link. For example, for my Immich server that is running in port 30041, I added a proxy host such that http://immich.layzer.lan/ takes you to http://192.168.0.10:30041/. Ports 80 and 443 have to be free for nginx to take. You can also add https support from here, and it’s very easy to do if you have bough a real domain.

Offtopic: I just noticed that on my Lemmy Android client you appear as laserjet, but on web you appear as layzerjeyt lol. Any idea why?

Less than 24 hours here lol.

I doubt that was my case. I saw comments from Prokbun’s CEO on r/selfhosted that they have a random flag system, and the discussion included my TLD. Plus Cloudflare let me buy it just fine without that intrusive step.

When I tried Porkbun, they asked me for selfie+ID before I could buy a domain there. I think is a random flag, but just a heads up.

I’ve been following reitti for some time. Happily surprised to see you on Lemmy :)

Didn’t knew it allowed live location sharing, thanks for the info.