The tailscale method, bake it yourself. It’s all routing-based.

If you have a remote VPS and a home wireguard server and both are connected, then you have a remote connection outside of your home network. Make it a transit router. Then you’ll have your mesh and your VPN all in one, even if it’s still just all you.

Go a step further and connect mullvad to the vps and do a little routing work.

As for what routing work specifically, I couldn’t begin to tell you. Ai and some search-engine-fu might be necessary.

Here’s a (similar) example, even if he’s doing it backwards to my suggestion:

https://superuser.com/questions/1776851/routing-wireguard-peers-traffic-via-another-peer

“WG Tunnel” on f-droid lets you define a config/native for either mobile or wifi, whichever you want.

two configs on both? It does that. A config on one and nothing on the other? It does that. It swaps whenever your phone moves from mobile to wifi or vice versa.

if neither is selected, it considers it “both”.

15 years ago a pirate decided to name the main channel on the Nintendo Wii for homebrew the “Homebrew Channel”, as it has been for 15 years.

That was my reference. If you found a hacked Wii right now and turned it on, it would be one of the channels available.

I do too. They tend to speak from the heart but the second something is inconvenient, they’re cool with relaxing their morals.

Hey, you paid for them to spy on your media, give them their money’s worth.

it’s commercial software

digital cancer

now I need to find a Wiimote, damnit

OpenWRT One

They have their own router.

Why no one mentioned this yet, I have no idea.

*What aren’t

Oh yeah. https://hub.docker.com/r/linuxserver/wireguard

Basically, docker can and does create network devices. It’s as easy for it to create wg0’s as it is to create networks for your other docker containers. If you’re going to run wireguard and docker, you’re better off to let docker handle the network routing and just run one of the various containers out there to stop them from fighting. That particular container is more general. You can run it client or server. Wg-easy, I believe is server-only, or even hide it inside other containers like docker-qbittorrent-wireguard, where it just hangs out and connects to whatever .conf you give it.

I did the whole thing in my early days selfhosting where I installed wireguard, docker, some apps, rebooted, everything breaks.

Install a wireguard container, configure it as you would, your apps, reboot… it still works, because docker isn’t conflicting with native wg-quick. It’s either this, or untangle and make an iptables setup permanent so when you reboot, it doesn’t break again.

Double-pro. Running wireguard on docker assures that a native wireguard install won’t conflict with docker. Keep those tables in the same place.

Ok now this is interesting.

I’m not knocking anubis but anubis seems very one-note, a single step. Pangolin looks more encompassing.

Only safeline’s webui is open source, and the dev is a little odd. Just like tailscale, I don’t like closed source reliance. I’ve been referred to open-appsec as an open alternative, but I’m not sure on them either.

…asterisk? The proxy everyone uses, the middleware that detects bots and such before letting you through. Their bread and butter. I’m not sure of any formal name.

deleted by creator

I use restic in combination with rsync.

Two days ago, I tried to setup unbound and fucked up my Nextcloud instance on the same host.

Restic restored /opt, /etc, /home and /var and then I used rsync to divvy them all out. For some reason, restic didn’t recognize the --delete flag so, rsync it was.

Reboot, waited 3 minutes, reload, there’s my Nextcloud login screen. Database cleaned up using occ commands and I’m back.

My restic repo sits on my main NAS, and a copy of it on another system. It holds all of my host’s aforementioned directories for easy setup and restore from either bad luck or dumb ideas.

…usually dumb ideas.

deleted by creator

I like how Lemmy somehow still finds negativity here. Never change lmao.

An internet celebrity in the millions of followers is going FOSS. Cheer up. On the downstream, this may bring Lemmy more users and put more visibility on open software.

A while back there was a situation where outsiders could get the name of the contents of your Jellyfin server, which would incriminate anyone. I believe it’s patched now, but I don’t think Jellyfin is winning any security awards. It’s a selfhosted media server. I have no frame of reference for knowing whether or not any of my information was overkill and I’m sure there are even some out there that would say I didn’t go far enough, even.

Here, since you can’t use a search engine: https://www.cvedetails.com/vulnerability-list/vendor_id-22884/product_id-81332/Jellyfin-Jellyfin.html

More, because I’ve been around this lap before, you’ll ask for more and not believe that one, here’s another: https://www.cvedetails.com/vulnerability-list/vendor_id-22884/product_id-81332/Jellyfin-Jellyfin.html

Do what you want. Idgaf about your install, just mine.