• 2 Posts
  • 52 Comments
Joined 2 years ago
cake
Cake day: June 30th, 2023

help-circle
rss



    1. I don’t think this is a problem with tailscale but you should check. Also you don’t have to pipe all the traffic through your tunnel. In the allowed IPs you can specify only your subnet so that everything else leaves via the default gateway.
    2. in the DNS server field in your WireGuard config you can specify anything, doesn’t have to be RFC1918 compliant. 1.1.1.1 will work too
    3. At the end of the day, a threat model is always gonna be security vs. convenience. Plex was used as an attack vector in the past as most most people don’t rush to patch it (and rightfully so, there are countless horror stories of PMS updates breaking the whole thing entirely). If you trust that you know what you’re doing, and trust the applications you’re running to treat security seriously (hint: Plex doesn’t) then go ahead, set up your reverse proxy server of choice (easiest would be Traefik, but if you need more robustness then nginx is still king) and open 443 to the internet.











  • Every change will bring it’s fair share of complainers, not much we can do about that. LILO to GRUB, SysV to systemd and now X11 to Wayland. No one is forcing your hand (unless you use a pre-packaged distro like Ubuntu/Fedora, in which case you go with whatever the distro provides), keep using X11 if you want stability, if you wanna dip your toes in bleeding-edge software and increase it’s userbase to show hardware manufacturers that their drivers need to be updated (I’m looking at you, NVIDIA) then feel free to mess around.

    Eventually the day will come when Wayland apps will simply not launch on X11 and you’ll migrate too.