try adding the sysctls parameters to your docker container too
Is there a way for a Wireguard peer to advertise AllowedIPs similar to Tailscale's subnet routings? If that's right, perhaps you can configure your host's address as one of the AllowedIPs on the OpenWRT peer, and skip port forwarding too
Two separate functions should go into two separate nodes
- Run Tailscale binary on host. Connect to Jellyfin server using that node's IP address.
and
- Run Gluetun + another Tailscale instance in containers. Don't use host networking, use bridge or something else. Connect to that node as an exit node
As an (advanced) alternative to Gluetun + Tailscale I propose tswg (my project)
If you can selfhost and can use containers/docker, I wanna shamelessly plugin my solution: https://github.com/stratself/tswg. Basically mount a WireGuard config from Nord or any upstream VPN, and the container will tunnel traffic to said VPN when you choose it as an exit node.
There are other gluetun + tailscale solutions that are worth a look too
Ah right, completely forgot about that (80 for HTTP-01, 443 for TLS-ALPN-01). Is a bummer unfortunately
Thanks for the advice. I'm already using podman rootless with custom subuid/subgid, which should achieve the same thing
I agree that the file sync is good. They (and owncloud afaik) are the only ones supporting virtual files on windows where you only download files when needed, saving storage space.
I suppose these fancy file features (bidirectional syncing, advanced conflict resolution etc) are targeted to the enterprise, not home users. So it's natural they'd include it with a bunch of bells and whistles that are half as good
stratself
joined 1 month ago
Hi, I think OP wants their sibilings to directly connect to their PC, skipping any relays, even if it's their VPS.
But if you are comparing setting up your own VPS instead of relaying through Tailscale's DERP, then the answer is... it depends on the distance and whether you can establish VPS->Local VM direct connections.
I found opening a specified port for Tailscale on the VPS to help with direct connections with CGNAT'd peers. I'm not familiar with Pangolin, but I think the same principle applies as long as at least one address:port combination is agreed between Wireguard peers.
If I'm being honest though, before doing all this, try asking your ISPs for IPv6 to avoid these cumbersome things together.