How you can invite your Bluesky friends into your Tailscale network using an OIDC shim
Ampache to Navidrome, with a side of Proxmox and Tailscale
That I even need and have made a diagram of the infrastructure for this site speaks to how over-engineered it is. Yet, while it is ostensibly a personal site, it's a personal site that's replaced many services that I previously used.
I've spent a while recently migrating my personal infrastructure off Coolify . Coolify 's an excellent tool and one that helped manage the initial learning curve of managing and deploying things when I started to self host things. As I got more comfortable with the process, issues and details I found myself wanting to remove it as an abstraction on top of what I had become comfortable managing.
this is mainly documentation for myself in future lol -- from 18/2/26 but i didnt post it lol
Source: https://github.com/Joxit/docker-registry-ui
A small guide for authenticating to Canonical LXD-UI using tsidp (Tailscale OpenID Connect (OIDC) Identity Provider)
Yes, you read that correctly, Firefox in Chrome all from a server in your house for free
In the web root of your web server, create the .well-known/webfinger file. For example, on mine, I have the following:
Bring your home network anywhere with the tiny Beryl AX router.
Bring your home network anywhere with the tiny Beryl AX router.
I will use an Orange Pi 5 Plus, but any device, including single board computers, should work, as long as they can run the latest stable Debian or Armbian release.
My goal with this project was to allow some devices on my local LAN to use a Tailscale exit-node as a gateway to exit out onto the internet. Basically, to enable some devices to route their traffic out via a Tailscale node, without having to install tailscale on those devices. The firewall should route the traffic down the Tailnet tunnel automatically without the target local devices being any the wiser. This post will walk through the steps required to get your OPNsense firewall to selectively send traffic out via a second gateway. The rest of the devices should continue to use your pre-existing gateway, while the selected devices should use a Tailscale exit-node as their gateway.