What's the craic with libre Tailscale alternatives?
Is there anything out there that fedi folks rate that's a little easier to manage than raw wireguard?
If the solution is just get good at wireguard or openvpn, that's fine to say.
@kawaiipunk I like forward or reverse tunnel instead of VPN, I know thats not what you asked for but it does work and IMO its simpler / easier to reason about because it doesn't require root or modify route tables. Ssh can be used for this in a pinch, I dislike ssh but at least its something that seems we all have to wade thru at some point.
There's lots of software that implements tunnels, I don't have a fave I can recommend as massively improved over ssh.
https://wiki.cyberia.club/hypha/infrastructure_and_operations/reverse-tunnel
@forestjohnson I've done ssh reverse proxies before to forward ports from local host. Is that similar?
I'll read your blog thanks
@kawaiipunk yep same idea that wiki page just talks about how to make it "clean" , run as a systemd service unit with its own isolated ssh known hosts file and what not. Iirc you can also set the tunnel users login shell to some program that hangs forever if you want to prevent the tunneler from being able to run commands on the server.