this post was submitted on 19 Sep 2023
15 points (89.5% liked)

Selfhosted

40403 readers
816 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
ruud
Loki
CannaVet
devve
HybridSarcasm
[email protected]
15
Emergency remote access in to tailnet (self.selfhosted)
submitted 1 year ago by avnrt to c/selfhosted
8 comments fedilink hide all child comments
 

None of my services are exposed to the public internet and are only accessed by myself through tailscale. One scenario, which still concerns me is "Away from home, access to none of my devices, need to use public/other computer to access files".

Short of downloading tailscale to said computer (which I likely wouldn't want to do/may not be possible, what would be the best way to have a backup entry way? Linode VPS with guacamole and tailscale to remote into a machine on the network? Something different entirely? Let my know what you use/would suggest

all 11 comments
sorted by: hot top controversial new old
[–] Impromptu2599 8 points 1 year ago (2 children)

Maybe you could do port knocking to have the firewall open the port to that IP after you hit a series of ports in the proper sequence.

[–] aviationeast 6 points 1 year ago (2 children)

Like 1, 2, 3, 4, 5!

[–] Nouveau_Burnswick 8 points 1 year ago

That's my luggage combo too!

[–] [email protected] 2 points 1 year ago

The best sequence.

[–] [email protected] 4 points 1 year ago

Bootable thumb drive with a persistent OS installed and preconfigured?

[–] [email protected] 3 points 1 year ago

Maybe https://tailscale.com/blog/ssh-console/ could help - they run a tailscale client in webassembly in the browser, plus a ssh client also in webasm, so you can get ssh to the tailnet without installing anything.

Because this works over DERP it probably even works on very locked down computers behind very strict firewalls, e.g. that only allow TCP 80/443 :)

[–] UninvestedCuriosity 1 points 1 year ago

Guacamole with the totp plugin or reverse ssh with a key. The reverse ssh will get around just about any security if setup properly but guacamole is like pleasant to use and doesn't depend on software.

[–] [email protected] -1 points 1 year ago

I don’t make my network accessible from the internet. Anything i need remove access to i would put out on a cheap vps. If i had to do it on my home network i would use a siloed vlan with vpn access.