Post #3399756
2026-06-17 14:40 UTC
I’d suggest you to investigate either Tailscale or similar solutions. I’m using Tailscale, and it’s really easy to set up. It can automatically connect to the VPN when you access their resource, and the internet works as well. So technically, they can be connected all the time. That’s much safer than the alternative of just opening a port, and dealing with things like CGNAT.
The alternatives to Tailscale I know about are Headscale (which you need self-hosting), Netbird, WireGuard. At least, but there are more.
And search for tunnels as well. You could utilise Cloudflare Tunnel, but I wouldn’t go that way.
I’d suggest testing waters with Tailscale as it’s the easiest, and tweak from there. They have a YouTube channel which helps at starting, I found it just recently. (I use them for a year or two now.)
Replies (1)
-
@Australis13@fedia.io 2026-06-18 05:10
Thanks. My main concern is needing to have the tailscale client set up on my relatives' devices, so it'd need to be easy to do and the configuration straightforward. If I wanted to route just traffic to Vikunja and Immich through it, so all their other apps (if on a phone) or web browsing (on a PC) didn't go through tailscale, is that straightforward to do and is it something that has to be done in the client-side configuration?