What's the craic with libre Tailscale alternatives?
Is there anything out there that fedi folks rate that's a little easier to manage than raw wireguard?
If the solution is just get good at wireguard or openvpn, that's fine to say.
@kawaiipunk
I agree that wireguard is a PITA, but once I managed to get the basics down and do a few setups a few times, It's been all I've needed to do some cool stuff.
I'm not saying it's the best solution, but I haven't needed tailscail or pangolin because it's WAY more complex than I need and adds a load of overhead and maintenance.
Wireguard is a few tiny files and a few commands to remember.
With that said, pangolin may be close to what you're looking for: https://pangolin.net/
@kawaiipunk I like forward or reverse tunnel instead of VPN, I know thats not what you asked for but it does work and IMO its simpler / easier to reason about because it doesn't require root or modify route tables. Ssh can be used for this in a pinch, I dislike ssh but at least its something that seems we all have to wade thru at some point.
There's lots of software that implements tunnels, I don't have a fave I can recommend as massively improved over ssh.
https://wiki.cyberia.club/hypha/infrastructure_and_operations/reverse-tunnel
@forestjohnson I've done ssh reverse proxies before to forward ports from local host. Is that similar?
I'll read your blog thanks
@kawaiipunk yep same idea that wiki page just talks about how to make it "clean" , run as a systemd service unit with its own isolated ssh known hosts file and what not. Iirc you can also set the tunnel users login shell to some program that hangs forever if you want to prevent the tunneler from being able to run commands on the server.
@kawaiipunk I have not used it but this is a thing: https://headscale.net/stable/