152·
7 days agoHeadscale is the tailscale backend server
- 0 Posts
- 7 Comments
Joined 1 year ago
Cake day: April 11th, 2024
You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user.
1·24 days agoYeah but they have a new system where you either pay annually for new updates, or the new “forever” license is something like $249.
Good to know, thanks. I haven’t tried anything else since the ~2 years I’ve started but who knows what the future holds. If unraid prices go any higher than they just increased to i may start looking at other options.
Just to add on since you mentioned unraid; i was a complete noob to self hosting and docker and unraid helped me learn the basics by dipping my toes in with their community apps store and then later with docker compose. Highly recommend if you’re just starting out and learning.
I have caddy on a vps that serves as a tailscale exit node and also reverse proxies over the tailnet. My pfsense router is also in the tailnet and exposes some subnet ip addresses to the tailnet. So for example I have public domain watch.example.com hits my caddy and gets proxied to internal IP 192.168.31.48 which is my jellyfin docker.
I’ve had immich running in a VM as a snap distribution for almost a year now and the experience has been leaps and bounds easier than maintaining my own immich docker container. There have been so many breaking changes over the few years I’ve used it that it was just a headache. This snap version has been 100% hands off “it just works”.
I actually did this instead of tailscale first; installing tailscale on a pfsense router was a challenge, iirc i had to find and install the freebsd tailscale pkg from the command line because the plugin doesn’t give the option to connect to a non-tailscale control plane.
After I did that and connected to my headscale server (on my vps) I could ping pfsense’s local ip over the tailnet, but couldn’t get any traffic out from pfsense. Turns out I had forgotten the pfsense tailscale plugin automatically sets up outbound rules for you.
That was a rabbit hole I didn’t feeling like falling down, so I turned off headscale and just used tailscale account and the normal pfsense tailscale plugin. But it’s there and it does work fine if I ever wanted to go figure out the outbound traffic rules.