That’s one of my TODOs on NixOS but I keep procrastinating on that. Today I finally set up adguard home locally on my PC and I want to make it available as a VPN(?) on my phone so I may finally get around to doing that soon-ish. I have zero clue how any of that works or how to set it up, however. Lol
Comment on PSA: Update your Tailscale!
xthexder@l.sw0.com 5 days ago
This feels like it has validated my decision to just use plain wireguard and hardcode my client list. It’s really not too hard to set up, barely different that configuring authorized_keys or ssh.
Martineski@lemmy.dbzer0.com 5 days ago
xthexder@l.sw0.com 5 days ago
This seems like a decent guide on how to set it up:
cyberciti.biz/…/how-to-set-up-wireguard-firewall-…
It’s very similar to the config I’ve got. The nat iptables stuff in step 1 is what enables wireguard to be used as a VPN exit node. (+ net.ipv4.ip_forward=1)
LodeMike@lemmy.today 5 days ago
The only downside is that it’s not redundant. I wish it was, somehow.
forbiddenlake@lemmy.world 5 days ago
Tailscale ssh isn’t enabled by default and I for one don’t see the need for it.
Your choice is valid, but you’ve chosen to be responsible for adding new clients everywhere and making sure they can all connect to each other, etc. you have simpler software but more manual work, which is a valid choice if you’re up for it.
lemmyvore@feddit.nl 4 days ago
Also, I’ve never been able to understand how something exposed to the entire internet (a WG server) is considered more secure than something that only connects peers privately to each other.
The attack surfaces are nothing alike.
Even if you limit access to WG with IP blocking there’s still no comparison to something you can’t access at all from outside.