Hacker News new | ask | show | jobs
by mightyham 72 days ago
I have a phone and laptop; those are my only two "mobile" devices that I might ever use to access my home network remotely. I set them up once, it took a few minutes, and I won't have to do it again unless I replace one of them.

I can completely understand using Tailscale for enterprise networks, but it seems very overengineered for my personal VPN needs.

2 comments

Yeah, sure, that seems simple enough.

I have a family of four. Plus a couple relatives who like having access to some of my self-hosted stuff. So, that's 6 people, each with at least one phone and one laptop, but probably an iPad too, or an extra work laptop, or something else random. Plus my youngest is addicted to buying old laptops on eBay and switching to them.

You made me curious, so I looked it up: I have 17 machines. Yeah... I'm not going back to plain WireGuard. :D

How do you handle home network IP changes?
i had this issue, with an even more wild set of restrictions, so i used Caddy to "output its own access log" and i had a cron job on any server at home that would hit that caddy server with a pre-defined key, so like `http://caddyserver.example.com/q?iamwebserver2j` for one server and "q?iamVOIP" for another.

https://github.com/genewitch/opensource/blob/master/caddy_ge...

https://github.com/genewitch/opensource/blob/master/show_own...

And now i have bi-directional IP exposure. it's cute because you can't tell if you just drive by, it doesn't look like it does anything. you have to refresh to see your IP, which is a little obfuscation.

if you care about security, not sure what to tell you. use port knocking.

Please note: this doesn't require installing anything on any remote, just a cron job to curl a specific URL (arbitrary URL). I used it to find the IP to ssh on remote radio servers (like allstar, d-star) for maintenance, for example.

Not OP, but a static IP was about US$10 as a one off payment.

It’s really nice.

Dynamic DNS
Cloudflare tunnels