observantTrapezium

Ah, interesting. Looks like using grants does resemble what I envision and probably easier to set up that mTLS. I’ll certainly explore that!

Ah, thanks for the idea. I’ll look into Traefik, I’ve heard of it, but wasn’t sure what it could do.

I’m already running Headscale, and it works great. But to expose individual services to individual devices it feels like an overkill. I don’t actually need all these devices to connect to the tailnet all the time, and some of these devices I don’t even want to be able to access the entire tailnet.

My thinking is to put Immich, Matrix, and CalDAV/CardDAV behind mTLS. So the clients practically do connect via native mobile apps rather than a browser. The devices belong to a small number of users, I don’t manage them, but can distribute the keystores, and plan on doing the PKI manually as it’s really not a lot to keep track of.

Not an authentication replacement for sure, just an extra layer of protection. The goal is mostly so that if there’s a new critical exploit, I don’t have to drop everything I’m doing and immediately mitigate.

Improvement from last week, but at the end of the day it’s what we used to call a filler episode… 3/10, maybe a 4.

Dave Foley from Kids in the Hall is the resort manager.

Spooky? Yes. Trek? Maybe the shit kind. 1/10

Added nothing to my life.

Pretty good start for the season, nice sci-fi concepts, 7/10

Pet peeves: away team knew it had to be ancient Earth after seeing T-Rex, after riding an alien creature that looked exactly like a horse at the beginning of the episode…

I was sure that the Voth were going to show up when they said it was the dinosaurs’ Earth, I think it’s a miss not to explore that, but that ancient Martian civilization concept was also interesting. It’s not scientific however as we know pretty well that Mars was already bone dry 65M years ago.