Comment - FBXL Lotide

Comment on Help an idiot protect his homelab and few services exposed to the internet.

monkdervierte@lemmy.zip@lemmy.zip ⁨3⁩ ⁨days⁩ ago

So the public services are purely for private use, to sync your mobile devices? You can install Wireguard on Android, send them over there. Though for e-reader, since they are Kobos (basically Android), you can trick it to install the app. Or even another launcher/book reader.

original

Sort:hotnew top

neo2478@sh.itjust.works ⁨3⁩ ⁨days⁩ ago
Kobo uses its own OS, not Android unfortunately. But I just found a tailscale plugin for it, so will try that

original
- Evotech@lemmy.world ⁨2⁩ ⁨days⁩ ago
  Install Koreader. Then install the bookorbit plugin
  
  It’s very easy and reversible. And its really good
  
  original
- monkdervierte@lemmy.zip@lemmy.zip ⁨2⁩ ⁨days⁩ ago
  Yeah, not “Android” like Amazons’ is not Android; all based on AOSP but not certified for Play Store. Or is it depending on the device in Kobo, fdo they use something else too? The ones i know have the not-Android ROM.
  
  original
  - PerogiBoi@lemmy.ca ⁨2⁩ ⁨days⁩ ago
    Kobo runs a light linux software called NickelOS on an esp32 board. No android at all.
    
    One can install a custom OS over top called KOreader which expands its usability and offers tons of community led plugins.
    
    original
    surewhynotlem@lemmy.world ⁨2⁩ ⁨days⁩ ago
    I hate our kobos. The app is shit. Total waste of money.
    
    But this gives me hope. I’m going to play with this.
    
    original
    -> View More Comments
Appoxo@lemmy.dbzer0.com ⁨3⁩ ⁨days⁩ ago
Issue:
Most clients we instruct on homeoffice usage with vpns are already unablebto remember the workflow: VPN -> (wait until green for connected) -> open work app -> Do work -> close work app -> disconnect vpn.

Now you also may not want to tunnel all traffic (if you don’t have a VPS with symmetric Gbit and unlimited traffic) so you’d need to set up split-tunneling and/or limit the apps allowed for the tunnel (works in android).

Honestly? It would be easier to set up a S2S split-tunnel VPN with wireguard on the relatives router.

original
- unique_hemp@discuss.tchncs.de ⁨3⁩ ⁨days⁩ ago
  You can just specify AllowedIPs in the wireguard client config to route only traffic to your services through the VPN, works great.
  
  original
  - Appoxo@lemmy.dbzer0.com ⁨3⁩ ⁨days⁩ ago
    Yes. Split-tunneling…
    But if you are really hardcore about restrictions and would need to update the profiles it will be a pita…
    Scheduling stuff is annoying ;-;
    
    original
    unique_hemp@discuss.tchncs.de ⁨3⁩ ⁨days⁩ ago
    AllowedIPs is a client side restriction that can be ignored anyway, no real security benefit from not just putting your entire network there.
    
    original
    -> View More Comments