VOVinícius Ornelasinvini-ornelas.hashnode.dev·14h ago · 7 min readHardening CI/CD for a NAT-Bound Server: Self-Hosted to TailscaleA self-hosted GitHub Actions runner on a public repo is a remote code execution endpoint — anyone who opens a PR can run arbitrary code on your production server. This post assumes you've shipped at l00
UMUttam Mahatainuttammahata.hashnode.dev·Jul 5 · 6 min readLocking Down a "Public" MongoDB Atlas Cluster Without Breaking Anyone's WorkflowI run a small K3s cluster spread across a handful of VPS nodes, plus a MongoDB Atlas cluster that several backend services talk to. At some point, Atlas's Network Access list had drifted to 0.0.0.0/0 00
SLSiddharth Lalinsiddharthlal.hashnode.dev·Jun 17 · 5 min readArchitecting a Zero-Trust Edge Router: Why I Replaced Container Bridge Networks with Host Networking + WireGuard TL;DR: Container bridge networks introduce two silent killers in high-throughput infrastructure: startup DNS race conditions and Layer 3 NAT overhead. I eliminated both by switching to host network mo10
RWRao Waqas Akraminraowaqasakram.hashnode.dev·May 7 · 8 min readAWS VPN Stuck on "Waiting for Identity"? Here's the Fix Nobody Talks AboutYou open AWS VPN Client, hit connect, and then... nothing. It just sits there. "Waiting for identity." No browser opens. No SSO prompt. No Microsoft login. No Okta. Just that little spinner mocking yo00
DPDivyesh P Kinblog.pkdiv.com·May 4 · 4 min readSecure Your Homelab with Tailscale: Access Self-Hosted Services from AnywhereServices today are getting more invasive while becoming more expensive. At some point, I figured it might be worth trying to host a few things myself instead. But self-hosting comes with its own set o10
HHugoinhugovalters.hashnode.dev·May 2 · 3 min readTailscale & ZeroTier: Why You're Fighting CGNAT and LosingI recently talked to a developer who spent three days trying to set up a WireGuard tunnel to his home server. He had the config perfect. He had the port forwarded on his router. He had the dynamic DNS updating every five minutes. But no matter what h...00
HHugoinhugovalters.hashnode.dev·Apr 22 · 3 min readWhat Is Tailscale? The VPN That Doesn't SuckThe VPN Struggle Is Real If you've ever tried to set up a traditional VPN — OpenVPN, WireGuard, IPsec — you probably know how it goes: It takes hours (or days) to configure Something always breaks with firewalls or DNS You spend more time managing t...00
FJFelix Jumasoninblackie.hashnode.dev·Apr 13 · 6 min readBuilding a Network-Wide Ad Blocker with AdGuard Home, Docker, and Tailscale on a Raspberry Pi 4How I set up whole-home ad blocking that follows me everywhere — even on mobile data Why I Built This Every device on my network was getting hammered with ads, trackers, and telemetry. Browser extens00
SPSaiyam Pathakinkubesimplify.hashnode.dev·Apr 7 · 10 min readSSH Into Your DGX Spark From Anywhere in the World Using Tailscale I recently got my hands on an NVIDIA DGX Spark, and the first thing I wanted to figure out was: how do I access this thing from anywhere? Whether I'm at a coffee shop, at a conference, or on a differe10
YTyahav tzukermaninstarshaf.hashnode.dev·Apr 7 · 5 min readHow to Harden Your Self-Hosted Server with Tailscale (Zero Open Ports, Zero Public Exposure)How I Hardened My Self-Hosted Server with Tailscale (Stop Exposing Ports Forever) TL;DR Stop forwarding ports. Stop exposing Nginx Proxy Manager to the internet. Install Tailscale on your server and every client device, bind your services to your Ta...00