Unlocking My Local Network With Tailscale

I have always been hesitant to self host anything I needed access to outside of my local network. Security is hard and opening up ports to your home is scary stuff. Instead, I tend to lean on a cheap VPS for anything I need access to remotely.

That has started to change since I heard a recommendation for Tailscale. In short it is a service that let's you connect and coordinate machines across the internet as if they were on a single LAN over the secure Wireguard protocol. At a high level, I can install Tailscale as a VPN on my phone and access a Nextcloud instance on my home LAN without opening any inbound ports on my router!

I heard the idea originally on Linux Unplugged and tried it out over the holidays. And without a doubt, it has been the most exciting thing to happen to my home networking setup in some time. I encourage anyone reading to try the same!

(For example, I currently have a little NAS box hosting: Nextcloud, Jellyfin and Home Assistant. I am thinking of hosting little, toy CMS's on my LAN and add a ephemral key access in CI, which is super rad and saves hosting costs for my goofy little throw-away projects.)

Comments?

Nope. Don't worry about leaving them here, instead hit me up @TRST_Blog and share your thoughts.

What is this Place?

This is the weblog of the strangely disembodied TRST. Here it attempts to write somewhat intelligibly on, well, anything really. Overall, it may be less than enticing.