Anything. You don't need any services to be public unless you choose for them to be.

Basically everything. Self hosting doesn't rely on public access.

Self host all your stuff and use tailscale if you just want to provide private services to yourself

Rent a VPN, setup a wire guard tunnel and fuck your ISP!

Anyway having a real public IP on a residential block is basically impossible anywhere but in the USA, I guess.

Put everything behind Tailscale or another VPN and use it that way from outside devices. There should be very little need to have a public IP, and if there's something that has to be exposed, use ngrok, cloudflared or Tailscale Funnel.

I just use a DDNS updater. That's honestly good enough for most purposes.

Alternatively, you could use a service like Zerotier, Tailscale or Netbird to create a virtual private LAN connection to a free Oracle VPS, then route the traffic from the VPN to your home network.

As someone in a similar situation I'd recommend using a free tier oracle vps with a wireguard tunnel to connect to you services. Effectively just using the vps as a proxy for your own network. Here's a guide that should work for your purposes https://github.com/mochman/Bypass_CGNAT

The best way would be to use a VPS to proxy your traffic to you. You can achieve this for pretty cheap, just set up an wireguard tunnel to a cheap VPS. That's exactly how I access all my services from outside my home. As long as the VPS has a publicly accessible IP (most of them do), you being behind CGNAT should not be an issue.

You can self host anything like this, all you need is buying a domain and set something up like DynDNS which updates the entry of the domain with your new IPv4 as soon as it changes.

I would recommend to not open your services to public, but set up a wireguard (or other VPN) endpoint in your home, which you then use to access all your services.

I think, an alternative to that would be some servicees from tailscale or cloudflare, I suppose

I mean you can host anything. It's just not reachable from the outside. And Fediverse or anything that gets data pushed in, won't work. The common method to handle all of this is to use some tunnelling solution.

Tailscale or Cloudflare will solve your problems.

You can use Tailscale, you can access your personal services with it but also expose public services with their Funnels system.

Keep in mind that while the clients are open source, their servers are running proprietary software.

my current ISP refuses to provide me a static IP

So then use dynamic dns? HurricaneElectric offers DynDNS now and it's great. You can update it right over curl if you want. I have it mapped to a cli function;

~\downloads
❯ ddns
HTTP/1.1 200 OK
Cache-Control: no-cache, must-revalidate
Content-Length: 18
Content-Type: text/html
Date: Tue, 25 Feb 2025 09:24:18 GMT
Email: DNS Administrator <dnsadmin@he.net>
Expires: Wed, 25 Feb 2026 09:24:18 GMT
Server: dns.he.net v0.0.1

nochg {ip}

If this is just for personal use, I'd see if you can put their router in modem mode and go get a better router, then I'd just use tail-scale or WireGuard.

Use Cloudflare's free tier tunnel

I just have a script that checks my IP every few minutes and changes the DNS record as necessary

Why do you need to expose a service publicly?

I believe duckdns has a tool that checks your public ip on a schedule to update your subdomain. (Which they provide for free last I checked)

Look:

1. you can buy any VPS server or use free VM in Amazon cloud
2. then connect your home PC to this VPS with VPN tunnel After that you have public IP address (on VPS) linked with you home server.
3. configure VPS for pass through incoming ports to you home server After that you can host anything for anyone in v4 or v6 internet.

Use VPN or DDNS connected to your domain registrar. Of course DDNS might not update immediately, especially if your domain host is not the same as your DNS provider, so you might have outages for short periods when your IP changes. So, depends on if you're OK with that or what kind of connection you have and whether it changes your IP a lot.

Also, might be able to get an IPv6 address for free depending on your ISP or at least you can set up your router to request that your address block is retained for you. I know Comcast does this. Unfortunately, my ISP does not.

I use a cheap VPS and connect all my relevant devices to it via a VPN (aldo self hosted w/ wireguard). It's $5/month and does the job.