Comment

Comment on NUC, Proxmox and HA (a noob seeking for help)

dai@lemmy.world ⁨2⁩ ⁨months⁩ ago

Tailscale is great, but it’s not something that should be shouted from the rooftops.

I use tailscale with nginx / pihole for my home services BUT there will be a point where the “free” tier of their service will be gutted / monetized and your once so free, private service won’t be so free.

Tailscale are SAAS (software as a service), once their venture capital funds look like their running dry, the funds will be coming from your data, limiting the service with a push to subscription models or a combination.

Nebula is one such alternative, headscale is another. Wire guard (which tailscale is based on) again is another.

source

Sort:hotnew top

brewery@lemmy.world ⁨2⁩ ⁨months⁩ ago
I’m hesitant about it too for the same reason but not sure if I’m being unreasonable given that I rely on so many other free services. However, this is one that would potentially have access to everything I do.

I’m watching headscale with interest until its safe enough for me to try breaking it!

source
- dai@lemmy.world ⁨2⁩ ⁨months⁩ ago
  I still use it, the service is very handy (and passes the wife test for ease of use)
  
  Probably some tinfoil hat level of paranoia, but it’s one of those situations where you aren’t in control of a major component of your network.
  
  source
BearOfaTime@lemm.ee ⁨2⁩ ⁨months⁩ ago
Fortunately it’s built on Wireguard. So it’s an easy way to get started with Mesh Networking.

Hamachi did the same thing 20 years ago, and is still around (I think) with a free tier that let’s you have 250 clients.

Tailscale also has the “Funnel” feature, which can route traffic into your Tailscale network without using a Tailscale client.

I’m currently a free tier of TS, and will have no problem paying for the service once I go production. It’s not expensive for what I’m getting.

I could just switch to self-hosting Wireguard, it’s the protocol Tailscale is using.

source
Lifebandit666@feddit.uk ⁨2⁩ ⁨months⁩ ago
I hear what you’re saying and honestly it’s not something I had thought about, so thanks for that.

For myself I should be good if your prediction comes true since I already have Home Assistant through my own domain using Cloudflare. I could theoretically move all my stuff to my own domain and Nginx, etc.

I like Tailscale because I don’t have to do all that. I’m new to Self Hosting (no I’m new to running multiple VMs) so finding something that just works with minimal effort is great for a noob. I wanna learn the things (networking), but I wanna learn other things (loads!) first.

Cloudflare and a Domain wasn’t as hard as DuckDNS and Nginx, but Tailscale was easier and cheaper than that in my adventures on Home Assistant. I’ve gone from hard to easy mode.

At some point a hobby has to cost money, I may be happy to pay for Tailscale if there’s more features. I’d like to replace SMB mounts with Tailnet mounts, but currently that’s not a thing to my knowledge.

Oh and I’m not really shouting from rooftops on a self hosted Lemmy server, it’s more like a quiet chat around a campfire telling a potential newcomer and easy way. It may cost in the future or they may make enough from Businesses that they keep a free tier, but currently it’s free and easy.

source
- dai@lemmy.world ⁨2⁩ ⁨months⁩ ago
  Ahh the shouting from the rooftops wasn’t aimed at you, but the general group of people in similar threads. Lots of people shill tailscale as it’s a great service for nothing but there needs to be a level of caution with it too.
  
  I’m quite new to the self hosting game myself, but services like tailscale which have so much insight / reach into our networks are something that in the end, should be self hosted.
  
  If your using SMB locally between VMs maybe try proxmox, https//clan.lol/ is something I’m looking into to replace Proxmox down the line. I share bind-mounts currently between multiple LXC from the host Proxmox OS, configuration is pretty easy, and there are lots of tutorials online for getting started.
  
  source
  - Lifebandit666@feddit.uk ⁨2⁩ ⁨months⁩ ago
    
    I share bind-mounts currently between multiple LXC from the host Proxmox OS, configuration is pretty easy, and there are lots of tutorials online for getting started.
    
    Now then:
    
    Are you sharing SMB mounts? I have my HDDs passed through to OMV and have considered just trying to pass them through to other VMs, but never tried because I don’t wanna break anything.
    
    I have seen that you can share SMB to Proxmox and use them in Proxmox but don’t know if you can use them in VMs too.
    
    As it is I really struggled with mounting smb for a couple of weeks and then had an “aha” moment last weekend, and have it all figured out now.
    
    The Tailnet idea was so I can just mount everything to the Tailnet and stop worrying about whether it’s on this vlan or that. I was trying to set up an Openwrt container with VPN, which I could use for any container that needs a vpn, but then those containers couldn’t see the main network properly…
    
    I’ve given up on that now and have my SMB mounts all set up, but feel like pass-through would give better network speeds for moving things around.
    
    source
    dai@lemmy.world ⁨2⁩ ⁨months⁩ ago
    Yeah there is a workaround for using bind-mounts in Proxmox VMs: gist.github.com/…/7e4a6f6f36610eeb0bbb5d011c8ca0b…
    
    If you wanted, and your drives are mounted to the Proxmox host (and not to a VM), try an LXC for the services you are running, if you require a VM then the above workaround would be recommended after backing up your data.
    
    I’ve got my drives mounted in a container as shown here: Image
    
    Basicboi config, but it’s quick and gets the job done.
    
    I’d originally gone down the same route as you had with VMs and shares, but it’s was all too much after a while.
    
    I’m almost rid of all my VMs, home assistant is currently the last package I’ve yet to migrate. Migrated my frigate to a docker container under nixos, tailscale exit node under nixos too while the vast majority of other packages are already in LXC.
    
    source
    -> View More Comments
  - nosnahc@lemmy.world ⁨2⁩ ⁨months⁩ ago
    I think you guys lots me haha!
    
    source