Comment on How to secure Jellyfin hosted over the internet?
dan@upvote.au 2 weeks agoIf you have a separate subnet for it, then why do you only want it to be connected when you’re not on home wifi? You can just leave it connected all the time since it won’t interfere with accessing anything outside that subnet.
That’s assuming you’re not routing all your traffic through it.
beerclue@lemmy.world 2 weeks ago
My network is not publicly accessible. I can only access the internal services while connected to my VPN or when I’m physically at home. I connect to WG to use the local DNS (pihole) or to access the selfhosted stuff. I don’t need to be connected while I’m at home… In a way, I am always using the home DNS.
Maybe I’m misunderstanding what you’re saying…
Lem453@lemmy.ca 2 weeks ago
He’s saying that while there is no benefit to being connect to WG at home, there is also no downside so many people just stay connected all the time.
beerclue@lemmy.world 2 weeks ago
Oh, I get that, but it just doesn’t make any sense to me to be physically next to the server, and connect to it via VPN…
dan@upvote.au 2 weeks ago
My point is that since the VPN uses a different subnet, it’s fine to keep it connected even at home. It’ll only use the VPN if you access the server’s VPN IP, not its regular IP.
In any case, Tailscale and Wireguard are peer-to-peer, so the connection over the VPN is still directly to the server and there’s no real disadvantage of using the VPN IP on your local network.
dan@upvote.au 2 weeks ago
Yeah, this. Plus if you leave it connected, you can use the VPN IPs while at home instead of having to use a different IP when at home vs when out (or deal with split horizon DNS)