• 0 posts
  • 12 comments
Joined 1 year ago
Cake day: September 15th, 2025
  • Right? Especially when I had symmetric gigabit (rip marital home before divorce) it was such a game changer. Still great with 1000/50 docsis just not quite as great lol

    It also took me a bit to realize GL-iNet is just a custom openwrt stack and you can reach the luci console for advanced tinkering :3

  • If you’re already running OpenWRT then I personally recommend Wireguard over tailscale if you have the time. It’s not hard to set up at all and takes the third party out of the loop. OpenWRT has excellent support for Wireguard configuration and export of configs to the devices you want to connect (install client, import config). The only “gotcha” is needing DynamicDNS (assuming you don’t have a static public IP)

    Tailscale is definitely super-simple but this IS the self-hosted community ;D I always prefer removing third parties at every opportunity.

  • You have several options.

    First important question, though: what type of router do you have? If you own your own router, instead of using the one provided by your ISP, then you may have additional options.

    1. Tailscale VPN - Quick and easy setup. “Just works”. Creates an environment like your computers are connected to the same network. Requires setup on each device. Some limits on free plan.
    2. *Wireguard VPN (router host) - Configuration required at the router. Only remote devices need additional setup; devices at home don’t need individual config. *Must be supported by router
    3. SSH tunnel - Ideal for terminal only, though X11 forwarding is possible. Requires either a router that has an SSH server, or port forwarding. Not recommended to allow username/password-only auth; should configure for key-based auth (rsa256/ed25519) only
    4. Secure Remote Desktop (hosted service) - TeamViewer and similar services provide remote desktop access through account-based login, using their relays. Theoretically secure but susceptible to account takeover attacks.
    5. Secure Remote Desktop (direct connect or self-hosted service) - Relay-less (e.g. NoMachine) and self-hosted relay (e.g. RustDesk) provide secure, self managed remote desktop. Requires router port forwarding or reverse-proxy configuration at the router.

    There are other options (like OpenVPN or Wireguard hosted on a device internal to the network, rather than the router) but I personally recommend one of the above 5 options depending on your use case and risk profile.

    If you travel a lot, consider purchasing a travel router (eg GL-iNet devices). Once configured, they act as a repeater or access point for your devices, including forwarding all traffic over a VPN. You arrive at your destination, plug in the travel router, use its webUI to connect it to the hotel or guest Wi-Fi of your choice, and then connect all your personal devices to its Wi-Fi network. No need for connecting every device to a new network at each destination. They support captive portal login, AdGuard Home baked in, blocking all non-VPN traffic, and more.

  • There is a corporate friendly way to handle this discussion. Here, I’ll even write it for you:

    "Hi [Team],

    Thanks for reaching out again about this issue.

    I have made two previous attempts to provide guidance on this matter, but my recommendation was dismissed without appropriate consideration due to first-impression aesthetics of a product that is provided for free by a small team of dedicated nerds.

    I attempted to explain that a corporate-friendly paid version exists but never got that far in our conversation due to your team’s outright dismissal of the product I know to be both effective and appropriate for your use case.

    Due to these circumstances, and your team’s apparent priorities, I recommend you pursue an expensive contract with CloudFlare.

    If you change your mind and would like to revisit this matter, I’m happy to set up a meeting to present the details.

    Best of luck,

    -Ek-Hou-Van-Braai

  • Sounds like you work with a bunch of short-sighted, judgemental simpletons who cannot look past initial aesthetics for a product that has nothing to do with aesthetics.

    Tbh I would run far the fuck away from that company if they can’t be bothered to sit down for a meeting where you explain that it’s an open-source project run by an extremely small team of nerds and that there is a commercial product available without the branding issues.

    Everything you’re describing about your employer/coworkers gives me giant red-flag warnings regarding their decision making process.

    Time to start looking for a new employer, or accept that they’re idiots and next time they ask about bots tell them “I’ve tried explaining this already but you dismissed me for silly reasons, so go pay for CloudFlare and stop bothering me”.

  • I’m trying so hard not to hate this post but you have given me so many reasons to

    • use of UwU in something I absolutely need to share with others

    • mismatched fonts

    • comic something font

    • no human readable data next to the QR code

    • mismatched gradient radii in the corners

    Make it stop 😭

    EDIT: For those who care, this comment falls into the category of “said in jest, meant in earnest”. I know it’s all on-brand and comedic, but my gut reactions are what they are 😂