Emergency remote access in to tailnet

Submitted ⁨⁨1⁩ ⁨year⁩ ago⁩ by ⁨avnrt@lemmy.world⁩ to ⁨selfhosted@lemmy.world⁩

None of my services are exposed to the public internet and are only accessed by myself through tailscale. One scenario, which still concerns me is “Away from home, access to none of my devices, need to use public/other computer to access files”.

Short of downloading tailscale to said computer (which I likely wouldn’t want to do/may not be possible, what would be the best way to have a backup entry way? Linode VPS with guacamole and tailscale to remote into a machine on the network? Something different entirely? Let my know what you use/would suggest

source

Comments

Sort:hotnew top

Impromptu2599@lemmy.world ⁨1⁩ ⁨year⁩ ago
Maybe you could do port knocking to have the firewall open the port to that IP after you hit a series of ports in the proper sequence.

source
- aviationeast@lemmy.world ⁨1⁩ ⁨year⁩ ago
  Like 1, 2, 3, 4, 5!
  
  source
  - Nouveau_Burnswick@lemmy.world ⁨1⁩ ⁨year⁩ ago
    That’s my luggage combo too!
    
    source
  - avidamoeba@lemmy.ca ⁨1⁩ ⁨year⁩ ago
    The best sequence.
    
    source
traches@sh.itjust.works ⁨1⁩ ⁨year⁩ ago
Bootable thumb drive with a persistent OS installed and preconfigured?

source
korfuri@sh.itjust.works ⁨1⁩ ⁨year⁩ ago
Maybe tailscale.com/blog/ssh-console/ could help - they run a tailscale client in webassembly in the browser, plus a ssh client also in webasm, so you can get ssh to the tailnet without installing anything.

Because this works over DERP it probably even works on very locked down computers behind very strict firewalls, e.g. that only allow TCP 80/443 :)

source
Fermiverse@kbin.social ⁨1⁩ ⁨year⁩ ago
I do that via my router vpn and my smartphone / tablet. The router app can connect via vpn but only when device was preregistered before while at home and with hardware access to the router.

Then vpn brings me into my home network and to my server if needed.

Router must have yhat feature though. Its a AVM 7590 AX

source
UninvestedCuriosity@lemmy.world ⁨1⁩ ⁨year⁩ ago
Guacamole with the totp plugin or reverse ssh with a key. The reverse ssh will get around just about any security if setup properly but guacamole is like pleasant to use and doesn’t depend on software.

source
Fermiverse@kbin.social ⁨1⁩ ⁨year⁩ ago
I do that via my router vpn and my smartphone / tablet. The router app can connect via vpn but only when device was preregistered before while at home and with hardware access to the router.

Then vpn brings me into my home network and to my server if needed.

Router must have yhat feature though. Its a AVM 7590 AX

source