That I even need and have made a diagram of the infrastructure for this site speaks to how over-engineered it is. Yet, while it is ostensibly a personal site, it's a personal site that's replaced many services that I previously used.
I've spent a while recently migrating my personal infrastructure off Coolify . Coolify 's an excellent tool and one that helped manage the initial learning curve of managing and deploying things when I started to self host things. As I got more comfortable with the process, issues and details I found myself wanting to remove it as an abstraction on top of what I had become comfortable managing.
Bring your home network anywhere with the tiny Beryl AX router.
Bring your home network anywhere with the tiny Beryl AX router.
My goal with this project was to allow some devices on my local LAN to use a Tailscale exit-node as a gateway to exit out onto the internet. Basically, to enable some devices to route their traffic out via a Tailscale node, without having to install tailscale on those devices. The firewall should route the traffic down the Tailnet tunnel automatically without the target local devices being any the wiser. This post will walk through the steps required to get your OPNsense firewall to selectively send traffic out via a second gateway. The rest of the devices should continue to use your pre-existing gateway, while the selected devices should use a Tailscale exit-node as their gateway.