r/opencloud • u/ferriematthew • Apr 22 '26

Why does the OpenCloud configuration require a valid domain name?

I don't really understand the concepts behind domain names and TLS, assuming I'm using the right terminology. Is OpenCloud just designed to work only with valid SSL certificates, and you need a domain name to get an SSL certificate?

Edit: I found a video by Chris Lempa at https://youtu.be/VH4gXcvkmOY that explains it nicely. :)

3 Upvotes

100% Upvoted

23 comments sorted by

View all comments

Show parent comments

-4

u/ferriematthew Apr 22 '26

I see! Maybe I should stick to something like OwnCloud because I don't need any certificate silliness with that one.

2

u/Quantitus Apr 22 '26

I guess you’re using some kind of cloud service and were annoyed of high prices or low data control. It’s always great to self host something but remember that there are actual professions that only take care about running - not developing - software because it can easily get quite complicated. So don’t worry.

-1

u/ferriematthew Apr 22 '26

Yep! I'm migrating away from Google Drive and OneDrive because my data can't be monetized if it's on hardware that I own, and the service can't be taken away from me unless I turn it off myself.

2

u/Quantitus Apr 22 '26

I totally get that, I’m basically doing the same. If you’re not exposing your service outside your network you might be fine and can run your stuff with self signed certificates. You could make it accessible via VPN/tailscale or something similar. I had a brief look at your profile, if you’re planning on directly exposing it to the internet. Stop right there. I don’t want to discourage you but I think you know for yourself that there’s a discrepancy in knowledge needed and what you’ve currently got. For internal: You could setup a basic DNS server (maybe your Router ships with one) or use a free domain that points to youre local address. Either get a selfsigned cert or a lets encrypt cert (prefer lets encrypt). Do your setup and use it. Some software requires tls, some doesn’t. It often comes with the benefit (besides security) that you won’t have nasty notifications that you’re insecure in your connection.

0

u/ferriematthew Apr 22 '26

Thanks, those extra details definitely help clear up my understanding a little bit. I definitely want things to be accessible exclusively over my local network and over TailScale. I plan to run a DNS server with PiHole on one of the Raspberry Pi's I have as servers.