Skip Navigation

User banner

Vanilla_PuddinFudge

@ Vanilla_PuddinFudge @infosec.pub

Posts
8
Comments
569
Joined
1 yr. ago

  • VPN Registrations Increase by 1,000%, less than Hour After PornHub Blocked France From Accessing its Website.

    Jump

  • More of just a softcore/strip kinda guy. I find porn corny and offputting so I'm usually just browsing /s/, fapello, or the endless tumblr blogs for every fetish imaginable. (suggestions welcome).

    gallery sites, are my thing, I guess, redtube is another good one with a lot of solo stuff. Motherless, though I hate going there because some of that content is a little on the teen-obsessed side, and kinda creepy, but I do like the way the site is designed.

    <_< are we having this discussion right now?

  • Friendly reminder that Tailscale is VC-funded and driving towards IPO

    Jump

  • the VPS uses the pi-hole through the tunnel

    The VPS is Pihole, the dns for the server side is 127.0.0.1. 127.0.0.1 is also 10.x.x.1 for the clients, so they connect to that as the dns address.

    server dns - itself

    client dns - the server's wg address

    On the local side, the pi-hole is the DNS for all the services on that subnet and each service automatically populate their host name on pi-hole. I can configure the DNS server in my router/firewall (OPNSense in my case)

    Only if your router/firewall can directly connect to wg tunnels, but I went for every machine individually. My router isn't aware I host anything at all.

    So when I ping service.example.com, it goes through the VPS, which queries the pi-hole through the tunnel and translates the address to the local subnet IP if applicable.

    Pihole (in my case) can't see 192.x.x.x hosts. Use 10.x.x.x across every system for continuity.

    So when I have the wg connection active and my pi-hole is the DNS, every web request will go through the pi-hole. If the IP address is inside the range of AllowedIPs, the connection will go through the tunnel to the service, otherwise, the connection will go through outside the wg tunnel.

    Allowed ips = 10.x.x.0/24 - only connects the clients and server together

    Allowed ips = 0.0.0.0/0 - sends everything through the VPN, and connects the clients and server together.

    Do the top one, that's how TS works.

  • Friendly reminder that Tailscale is VC-funded and driving towards IPO

    Jump

  • My entire setup might not be your entire setup, I have the basic functionality of connecting multiple systems into one mesh network. That's all I needed so it's all I did.

  • Friendly reminder that Tailscale is VC-funded and driving towards IPO

    Jump

  • The vps is the wg server and my home server is a client and it uses pihole as the dns server. Once your clients hang around for a minute, their hostnames will populate on pihole and become available just like TS.

    You do have to set available ips to wg's subnet so your clients don't all exit node from the server, so you'll be able to use 192.168.0.0 at home still for speed.

    As for NPM, run it on the proxy, aim (for example) Jellyfin at 10.243.21.4 on the wg network and bam.

  • Friendly reminder that Tailscale is VC-funded and driving towards IPO

    Jump

  • Pihole and pivpn get along like peas and carrots.

    Make the "available ips" your pivpn subnet and ta-da, the mesh functionality of tailscale without the entire connection.

    Want to exit node from the server? Just change the value back to 0.0.0.0/0.

  • Friendly reminder that Tailscale is VC-funded and driving towards IPO

    Jump

  • Pivpn is really easy, and since pivpn is just scripts, it always installs current wireguard even if they lax on updating pivpn that often.

  • Friendly reminder that Tailscale is VC-funded and driving towards IPO

    Jump

  • Same, my Hetzner proxy running NPM, with pivpn and pihole is doing all it needs to do for $3 and some change.

    My only open ports on anything I own are 80, 443 and the wg port I changed on that system. Love it.

  • Friendly reminder that Tailscale is VC-funded and driving towards IPO

    Jump

  • I think there's room in the world for a selfhosted, foss version of their software, even if a little simplified.

  • Friendly reminder that Tailscale is VC-funded and driving towards IPO

    Jump

  • Friendly reminder that Tailscale is VC-funded and driving towards IPO

    Jump

  • I just replaced my entire setup with base wireguard as a challenge, easier than I expected it to be, and not hard to mimic tailscale.

  • Massaging the neck and face may help flush waste out of the brain

    Jump

  • I'm a slab of meat, rubbing my meat to relax my meat. This biomass is relaxed

  • Divorcees of Lemmy, why did your marriage end?

    Jump

  • There's no central reason, just a large imaginary orb colored with various reasons.

    K couldn't grow out of weekly spending to spend, or hoping for the impossible. She couldn't have kids, and she held a lot of it against me for not trying hard enough when I more saw it as her not facing biological, medical reality with what her doctors were telling her, lose weight and maybe, you have a shot. No? (PCOS)

    With our parents aging and no one around to take care of them, I was left with a hard decision, spin my tires on someone I had over a decade of attachment to who had grown to hate me or go take care of my disabled mom.

    Coin flipped, and while I don't regret my decision, I still miss her, but I have zero drive whatsoever to have a love life. There's too much to do, a country in political turmoil and a busy family that I don't want to damage with someone potentially untrustworthy.

  • This is a PSMA!

    Jump

  • Media store is a 12TB and an 8TB that dump into a 20TB that sits cold all but once a month.

    My more immediate data that I need day to day is in a synced Documents folder across four different devices. I don't back it up, per se, I just make it impossible to lose.

  • Trump says Elon Musk will face 'very serious consequences' if he funds Democratic candidates

    Jump

  • The left doesn't have armed militias.

    ...wait, why don't we? The skinhead neo-nazis do.

  • Trump says Elon Musk will face 'very serious consequences' if he funds Democratic candidates

    Jump

  • Welp, that commits my mental map of the next 8 years, here comes a Musk-funded Democrat to divide all of us again for another Conservanazi win. Yippee.

  • Trump team scrambles after report he’s killing manufacturing jobs

    Jump

  • He doesn't care. It's not a concern whatsoever.

  • Google Restricts Android Sideloading—What It Means for User Autonomy and the Future of Mobile Freedom – Purism

    Jump

  • Aaaaand now I'm carrying around a laptop again, at least mini pcs are tiny now, maybe a small handheld would do...

    if any of this shit hinders me, I'll get a dumb phone and the cheapest iphone available for manditory work-based things and say so-long to being a mobile OS user.

  • We Should Immediately Nationalize SpaceX and Starlink

    Jump

  • Sure, that's the ideal.

    Is it likely? Ehhhh

  • Nervous Republicans flee Trump-Elon Musk blast radius

    Jump

  • He's not canon until Disney says so