3 ms·

Interesting. I would never use a hosted VPN service because I want to be the only one who controls access. For this reason I don't use something like ZeroTier e

Interesting. I would never use a hosted VPN service because I want to be the only one who controls access. For this reason I don't use something like ZeroTier either (even though that can technically be self-hosted, it's not easy). But Mesh VPN is a great option. I wonder if Headscale can also use internal credentials? As far as I remember with tailscale you had to log in with Google or Microsoft which is another total deal-breaker. But I haven't looked at it in ages as the hosted variety was a non starter anyway. Edit: Indeed they now have local logins, but still I would want to be the only one who controls access :) I don't have a problem with paying for a good product, it's just the control that's an issue for me. For something as crucial to security as this, it needs to lie with me alone. Though I do prefer to just buy software outright instead of subscription models. Since I will do my own hosting, I don't think this is too much to ask. Perhaps they could offer a paid tier for people using headscale.

gruez 4y ago
>I wonder if Headscale can also use internal credentials? As far as I remember with tailscale you had to log in with Google or Microsoft which is another total deal-breaker. But I haven't looked at it in ages as the hosted variety was a non starter anyway. from the project page: https://github.com/juanfont/headscale https://github.com/juanfont/headscale >Node registration > • Single-Sign-On (via Open ID Connect) > • Pre authenticated key
- GekkePrutser 4y ago
  Hmm, the SSO is too cumbersome with me (I don't want to set up my own OpenID service just for this). The preauth key might work though. I'll try it out!
  - moontear 4y ago
    But don't you want your own OpenID service? I highly recomment Authelia - easy to set up and works for so many services that allow a custom OIDC service.
    - ikiris 4y ago
      with the red flag that they don't support registering multiple security keys via gui why im still using keycloak
      - moontear 4y ago
        I wouldn't consider this a red flag, but a missing feature. But nothing against keycloak - keycloak is the gold standard. But compared to Authelia, Keycloak is really cumbersome to get up and running and also to maintain.
    - GekkePrutser 4y ago
      Thanks for your tips. If it's that easy then yeah maybe. I would like to do more with fido2. And keycloak is indeed complex. I would need more security keys but it sounds like there is a non-gui method? That'd be fine for me.

gruez 4y ago

>I wonder if Headscale can also use internal credentials? As far as I remember with tailscale you had to log in with Google or Microsoft which is another total deal-breaker. But I haven't looked at it in ages as the hosted variety was a non starter anyway. from the project page: https://github.com/juanfont/headscale https://github.com/juanfont/headscale >Node registration > • Single-Sign-On (via Open ID Connect) > • Pre authenticated key

GekkePrutser 4y ago
Hmm, the SSO is too cumbersome with me (I don't want to set up my own OpenID service just for this). The preauth key might work though. I'll try it out!
- moontear 4y ago
  But don't you want your own OpenID service? I highly recomment Authelia - easy to set up and works for so many services that allow a custom OIDC service.
  - ikiris 4y ago
    with the red flag that they don't support registering multiple security keys via gui why im still using keycloak
    - moontear 4y ago
      I wouldn't consider this a red flag, but a missing feature. But nothing against keycloak - keycloak is the gold standard. But compared to Authelia, Keycloak is really cumbersome to get up and running and also to maintain.
  - GekkePrutser 4y ago
    Thanks for your tips. If it's that easy then yeah maybe. I would like to do more with fido2. And keycloak is indeed complex. I would need more security keys but it sounds like there is a non-gui method? That'd be fine for me.