I recently set up my own home server, running Ubuntu linux. The intent I'm having for this is to have a private wiki for my family, so we can have a place to collect information like phone numbers, and other relevant information. Currently, access is limited to my LAN, essentially prohibiting outside access, but I'm considering allowing external access, if I can figure out how to meet a level of security. Specifically, I'm looking for a solution which:
- Prevents read access of any web content without some kind of authentication.
- The authentication should be passed in such a way to prevent packet sniffing to allow permanent access to the network.
- Ideally, I don't want this to cost anything, or if it costs something, to be a small one time cost.
- As one of the most common locations I will be accessing this will be work, I would prefer a solution which does not require any additional software on the client end.
- Access to within the LAN must be unrestricted, ie, no password required.
- I would like to be able to access the site occasionally from my Android phone, so any solution should not prevent that from working.
- I would like to expand this someday to allow more than just wiki software, but if there's a clever way to do this with the wiki software, I'll consider it.
My current thought is leaning towards producing a self-signed SSL certificate, and using apache authentication, either basic or digest, but requiring it to be passed over HTTPS, but I'm opened to alternative solutions.
My full config:
- Ubuntu 11.10
- Apache 2.2
- Media Wiki 1.18