The tailscale method, bake it yourself. It’s all routing-based.

If you have a remote VPS and a home wireguard server and both are connected, then you have a remote connection outside of your home network. Make it a transit router. Then you’ll have your mesh and your VPN all in one, even if it’s still just all you.

Go a step further and connect mullvad to the vps and do a little routing work.

As for what routing work specifically, I couldn’t begin to tell you. Ai and some search-engine-fu might be necessary.

Here’s a (similar) example, even if he’s doing it backwards to my suggestion:

https://superuser.com/questions/1776851/routing-wireguard-peers-traffic-via-another-peer

“WG Tunnel” on f-droid lets you define a config/native for either mobile or wifi, whichever you want.

two configs on both? It does that. A config on one and nothing on the other? It does that. It swaps whenever your phone moves from mobile to wifi or vice versa.

if neither is selected, it considers it “both”.

15 years ago a pirate decided to name the main channel on the Nintendo Wii for homebrew the “Homebrew Channel”, as it has been for 15 years.

That was my reference. If you found a hacked Wii right now and turned it on, it would be one of the channels available.

I do too. They tend to speak from the heart but the second something is inconvenient, they’re cool with relaxing their morals.

Hey, you paid for them to spy on your media, give them their money’s worth.

it’s commercial software

digital cancer

now I need to find a Wiimote, damnit

I used a Oneplus 6T on PMOS/Phosh for a week.

It ain’t ready. I work in an iffy area as far as coverage is concerned and I missed a lot of messages. My 7pro on Lineage can deal with it, but sometimes I’d turn the OP6T on, and find networking off entirely with it working, or vice versa.

Software-wise, if you know and comfortably use a Linux laptop, you’ll be at home. Having said that, realize that 90% of people won’t be. You will absolutely have to use the terminal and will be entirely lost and confused if you don’t already have experience with the system.

Also software-wise, know that most Linux software is made with the idea that you’re not sipping data. Open Jellyfin for the 40th time and it will redownload the same images,… for the 40th time, or a random firefox tab sipping data off of you 24/7 without you even being aware of it. Laptops are different, and it’s what the system thinks it is, so it’s going to perform that way, not like the phone that’s stapled and duct taped to it.

I wonder if it isn’t still just a piss in the wind. All Microsoft has to do is require something propretary and the US government and their customers will just roll it out. I don’t fee like we have the ability to choose with our wallets anymore. If they can’t win fairly, Microsoft will cheat and collude with other companies to make them your only option.

Assuming most end users for Debian even have monitors connected…

OpenWRT One

They have their own router.

Why no one mentioned this yet, I have no idea.

deleted by creator

Imagine how many they haven’t stumbled across yet.

this man ssh’d in on a five-digit port

It won’t arrive, lets see,… tomorrow. Good! Just around the time I won’t be expecting it.

*What aren’t

Oh yeah. https://hub.docker.com/r/linuxserver/wireguard

Basically, docker can and does create network devices. It’s as easy for it to create wg0’s as it is to create networks for your other docker containers. If you’re going to run wireguard and docker, you’re better off to let docker handle the network routing and just run one of the various containers out there to stop them from fighting. That particular container is more general. You can run it client or server. Wg-easy, I believe is server-only, or even hide it inside other containers like docker-qbittorrent-wireguard, where it just hangs out and connects to whatever .conf you give it.

I did the whole thing in my early days selfhosting where I installed wireguard, docker, some apps, rebooted, everything breaks.

Install a wireguard container, configure it as you would, your apps, reboot… it still works, because docker isn’t conflicting with native wg-quick. It’s either this, or untangle and make an iptables setup permanent so when you reboot, it doesn’t break again.

Double-pro. Running wireguard on docker assures that a native wireguard install won’t conflict with docker. Keep those tables in the same place.

Ok now this is interesting.

I’m not knocking anubis but anubis seems very one-note, a single step. Pangolin looks more encompassing.

Only safeline’s webui is open source, and the dev is a little odd. Just like tailscale, I don’t like closed source reliance. I’ve been referred to open-appsec as an open alternative, but I’m not sure on them either.