#tailscale articles

VOVinícius Ornelasvini-ornelas.hashnode.devJul 13 · 7 min read

Hardening CI/CD for a NAT-Bound Server: Self-Hosted to Tailscale

A self-hosted GitHub Actions runner on a public repo is a remote code execution endpoint — anyone who opens a PR can run arbitrary code on your production server. This post assumes you've shipped at l

0

UMUttam Mahatauttammahata.hashnode.devJul 5 · 6 min read

Locking Down a "Public" MongoDB Atlas Cluster Without Breaking Anyone's Workflow

I run a small K3s cluster spread across a handful of VPS nodes, plus a MongoDB Atlas cluster that several backend services talk to. At some point, Atlas's Network Access list had drifted to 0.0.0.0/0

0

JLJeremy Longshorejeremylongshore.hashnode.devJul 1 · 16 min read

Eight Deploy Iterations: Tailscale OIDC + Reusable Workflow

Day 1 of VPS-as-the-Home was the launch of a 9-priority program: consolidate Intent Solutions hosting onto a single Contabo VPS, execute the GCP exodus, and harden every active repo's deploy posture.

0

DMDan Mercededanmercede.hashnode.devJun 26 · 33 min read

Self-Hosting Many Apps on One Box: A Beginner's Guide to the Two-Plane Architecture

If you've ever tried to run your own apps — a dashboard, wiki, side-project API, or metrics stack — on a single machine you control, you've probably hit the wall everyone hits: self-hosting gets messy

0

SLSiddharth Lalsiddharthlal.hashnode.devJun 17 · 5 min read

Architecting a Zero-Trust Edge Router: Why I Replaced Container Bridge Networks with Host Networking + WireGuard

TL;DR: Container bridge networks introduce two silent killers in high-throughput infrastructure: startup DNS race conditions and Layer 3 NAT overhead. I eliminated both by switching to host network mo

0

RWRao Waqas Akramraowaqasakram.hashnode.devMay 7 · 8 min read

AWS VPN Stuck on "Waiting for Identity"? Here's the Fix Nobody Talks About

You open AWS VPN Client, hit connect, and then... nothing. It just sits there. "Waiting for identity." No browser opens. No SSO prompt. No Microsoft login. No Okta. Just that little spinner mocking yo

0

DPDivyesh P Kblog.pkdiv.comMay 4 · 4 min read

Secure Your Homelab with Tailscale: Access Self-Hosted Services from Anywhere

Services today are getting more invasive while becoming more expensive. At some point, I figured it might be worth trying to host a few things myself instead. But self-hosting comes with its own set o

0

HHugohugovalters.hashnode.devMay 2 · 3 min read

Tailscale & ZeroTier: Why You're Fighting CGNAT and Losing

I recently talked to a developer who spent three days trying to set up a WireGuard tunnel to his home server. He had the config perfect. He had the port forwarded on his router. He had the dynamic DNS updating every five minutes. But no matter what h...

0

HHugohugovalters.hashnode.devApr 22 · 3 min read

What Is Tailscale? The VPN That Doesn't Suck

The VPN Struggle Is Real If you've ever tried to set up a traditional VPN — OpenVPN, WireGuard, IPsec — you probably know how it goes: It takes hours (or days) to configure Something always breaks with firewalls or DNS You spend more time managing t...

0

FJFelix Jumasonblackie.hashnode.devApr 13 · 6 min read

Building a Network-Wide Ad Blocker with AdGuard Home, Docker, and Tailscale on a Raspberry Pi 4

How I set up whole-home ad blocking that follows me everywhere — even on mobile data Why I Built This Every device on my network was getting hammered with ads, trackers, and telemetry. Browser extens

0

#tailscale

Search Hashnode