I’ve always wanted to do this however do I understand it correctly that I need to host headscale on a vps server that is not in my tailnet/home network?

Use the jellyfin kodi addon works very smoothly. I’ve been using it for two years and love it. I replaced all my chromecasts with kodi. It even has the approval of my wife.

I’m currently looking for something like this as well. I’ll have to give go access a try

I have vaultwarden in docker but I don’t expose my instance externally as you really don’t need to. Put the bitwarden app on your phone sign into the instance and it will work even if your instance is borked. You can’t add items but it works.

My suggestion, run it in docker and just back up the entire docker compose and folder structure as that includes the database as well.

If you want to expose it use nginx proxy manager its dead simple and awesome.

Firedragon on desktop( I use garuda Linux) and Mull on android

I’m currently using osmc on raspberry pi 3s with the jellyfin kodi add-on installed. Works like a charm and can also install other video addons as well. Its been rock solid and you can airplay and stream from your phone. Been running this replacement for a year.

If you try to browse to the tailscale website does it work?

If it does you could setup tailscale with an exit node at your house and tunnel your connection that way? Everything would then be coming from your home internet. I have had good success with tailscale being able to punch a hole through some pretty filtered firewalls.

I just picked up a banglejs 2 and I love it. I was using a galaxy smart watch 5 but didn’t work without gapps on my lineage phone. Its obviously not as good as the Samsung smart watch but I’ve been super happy with it. No creating accounts, getting tokens etc. Just pair it via Bluetooth and gadget bridge and you are good to go. Its a little pricey but for open source watch its awesome, I’ve heard good things about pinetime as well.

I’ve got a 80$ ZigBee centralite pearl thermostat. Took a bit to setup automations for it but its been rock solid

I do this too, have acls setup for my main LAN ips and all my internal hosts setup in opnsense in hosts override so they get redirected to NPM. Not sure if this is the correct way but it gives me all valid certificates. You could also do domain override and redirect just that domain to your NPM.

Hmm yeah makes sense, I just can’t do it since then I would need VPN app and home assistant app running 24/7 lol. I need location for home assistant and both appa are too much for my wife’s iPhone. I might tey again but with gpslogger instead of home assistant for location.

I would be interested to hear how this goes. I had this setup with tailscale but having it run 24/7 on both our phones drained the battery really quickly. That being said I was running full tunnel and also needed home assistant background location running as well.

I like lineage is and have used for 5+ years. I’m now using it without google services. I mainly use it because I can’t really afford a pixel phone and the many supported devices lineage is has is phenomenal. That being said I would love to tey graphene os.

I host all my stuff locally including my nginx proxy manager and I do also have opnsense firewall rules with geoip blocking as well.

I mean no but the added security kind of trumps everything else. It helps to not expose my public IP and the added bonus of firewall rules too.

So what provider does everyone recommend instead of cloudflare for proxy? I use cloudflare to protect all my websites but I’ve been trying to find some other place to proxy them from.

I don’t really get the rub here, JM all for separating work devices and personal devices but the 2fa apps don’t leak any info and the company can’t “do” anything to your phone remotely. The apps work in air plane mode. I also want to bet more than half the users that complain about this use the companies free WiFi.

Get a flip phone and say you can’t install it, however SMS 2fa is very insecure.

I tried this for 2 months with tailscale and love it, however having it run 24/7 on both my wife’s and my phone was too much. It literally wiped out the battery on my wife’s iPhone 12 unless she charged it in the middle of the day. I lost about 40% more battery throughout the day on my android. I had to switch back to cloudflare and nginx proxy manager for now.

Hmm ok I’ve only tried accessing the login page via my browser using the fqdn but haven’t tried from another source like davx. I have 10 other services working fine over the internet so I’m not sure what im doing wrong with this setup.

I love the dragon age series, my favourite RPG games by far. I honestly think inquisition was my favourite game of the series so far and has a lot of replay ability. I can say enough good things about this series the combat, story, characters, crafting, I absolutely love these games. I’m hyped for dreadwolf.