Comment on Tailscale Services GA: App-aware connectivity with more control
MatSeFi@lemmy.liebeleu.de 3 days agodid it one 8-Months ago or so…just works… like black magic. Fire and forget VPN (But SSO is a must in my opinion otherwise key exchange is too tideous ) I did it about 8 months ago… it just works like black magic. It’s a “fire and forget” VPN, but SSO is a must in my opinion; otherwise, key exchange is too tedious.
avidamoeba@lemmy.ca 3 days ago
You’re talking about Headscale right?
MatSeFi@lemmy.liebeleu.de 2 days ago
Yes… sry wasn’t clear about that…
avidamoeba@lemmy.ca 2 days ago
Can you share what components are you using for SSO, UI, etc.?
MatSeFi@lemmy.liebeleu.de 2 days ago
Never got warm with all the UIs available. But things change very fast on that front. For me it looks like that they only differ by the time it takes to provide support for the newest headscale version. Just take the one supporting yours :) For SSO , the OIDC provider from Nextcloud is working as good as any other. Having some kind of static IP also helps but the headscale server runs on HTTPS port plus some optional ones (not sure if I remember correctly) dynamic dns should be ok as well.
tux7350@lemmy.world 2 days ago
Not OP but I use headscale and have it configured using Authentik for SSO. Works flawlessly once its up and running. I also use headplane for the UI. It has SSO integration as well which makes everything a breeze.