I’ve always wanted to do this however do I understand it correctly that I need to host headscale on a vps server that is not in my tailnet/home network?

This ^^ I thought this whole controversy was because they don’t support the HA nix package BUT when people use it and their HA instance breaks…they go to homeassistant support… Doesn’t sound like a dictator but just saying they don’t support that nix package etc. ?

Use the jellyfin kodi addon works very smoothly. I’ve been using it for two years and love it. I replaced all my chromecasts with kodi. It even has the approval of my wife.

I’m currently looking for something like this as well. I’ll have to give go access a try

I have vaultwarden in docker but I don’t expose my instance externally as you really don’t need to. Put the bitwarden app on your phone sign into the instance and it will work even if your instance is borked. You can’t add items but it works.

My suggestion, run it in docker and just back up the entire docker compose and folder structure as that includes the database as well.

If you want to expose it use nginx proxy manager its dead simple and awesome.

Firedragon on desktop( I use garuda Linux) and Mull on android

I’m currently using osmc on raspberry pi 3s with the jellyfin kodi add-on installed. Works like a charm and can also install other video addons as well. Its been rock solid and you can airplay and stream from your phone. Been running this replacement for a year.

If you try to browse to the tailscale website does it work?

If it does you could setup tailscale with an exit node at your house and tunnel your connection that way? Everything would then be coming from your home internet. I have had good success with tailscale being able to punch a hole through some pretty filtered firewalls.

I have all reolink cameras. I put them in a separate vlan with no internet access or DNS just LAN access. They are by far my favourite and already have tight integration support in home assistant.

Can somebody shed some light on why this doesn’t create a systemd entry? It works when I manually run it specifying the config.yaml file but there are no systemd entries. I’m on Ubuntu desktop.

I just picked up a banglejs 2 and I love it. I was using a galaxy smart watch 5 but didn’t work without gapps on my lineage phone. Its obviously not as good as the Samsung smart watch but I’ve been super happy with it. No creating accounts, getting tokens etc. Just pair it via Bluetooth and gadget bridge and you are good to go. Its a little pricey but for open source watch its awesome, I’ve heard good things about pinetime as well.

I’ve got a 80$ ZigBee centralite pearl thermostat. Took a bit to setup automations for it but its been rock solid

I do this too, have acls setup for my main LAN ips and all my internal hosts setup in opnsense in hosts override so they get redirected to NPM. Not sure if this is the correct way but it gives me all valid certificates. You could also do domain override and redirect just that domain to your NPM.

Hmm yeah makes sense, I just can’t do it since then I would need VPN app and home assistant app running 24/7 lol. I need location for home assistant and both appa are too much for my wife’s iPhone. I might tey again but with gpslogger instead of home assistant for location.

I would be interested to hear how this goes. I had this setup with tailscale but having it run 24/7 on both our phones drained the battery really quickly. That being said I was running full tunnel and also needed home assistant background location running as well.

I like lineage is and have used for 5+ years. I’m now using it without google services. I mainly use it because I can’t really afford a pixel phone and the many supported devices lineage is has is phenomenal. That being said I would love to tey graphene os.

I host all my stuff locally including my nginx proxy manager and I do also have opnsense firewall rules with geoip blocking as well.

I mean no but the added security kind of trumps everything else. It helps to not expose my public IP and the added bonus of firewall rules too.

So what provider does everyone recommend instead of cloudflare for proxy? I use cloudflare to protect all my websites but I’ve been trying to find some other place to proxy them from.

I don’t really get the rub here, JM all for separating work devices and personal devices but the 2fa apps don’t leak any info and the company can’t “do” anything to your phone remotely. The apps work in air plane mode. I also want to bet more than half the users that complain about this use the companies free WiFi.

Get a flip phone and say you can’t install it, however SMS 2fa is very insecure.