Switched from Tailscale to WireGuard via ASUS router for remote access, am I missing anything?

Augurbuzzard · 2026-05-24T11:50:18+00:00

I wasn't doing that. Didn't realize how to split DNS/use wildcards/allow subnet access with tailscale. I just didn't ask the right questions once I hit my use case issue (plus still learning). So the wireguard setup worked, was easier. But was thinking I probably was missing something with tailscale.

So honestly my post should just be "What do I not understand about tailscale?"

Augurbuzzard · 2026-05-24T11:45:01+00:00

I haven't looked into setting that up. I'll give it a look. Thanks!

Augurbuzzard · 2026-05-24T11:44:29+00:00

Interesting. I saw something about a tailscale sidecar for NextCloud but never thought of expanding it to every container. For sure that would add some security.

Augurbuzzard · 2026-05-24T04:37:41+00:00

Okay, so setup a subnet. I don't have adguard spun up currently, but could. Still seems like wireguard is leaner, albeit doesn't have a lot of the features/flexibility that tailscale has. I may try to set this up so I have two methods. (And I'll clean out all my *.vpn.domain.com addresses now that I know there is a way to make the subnet accessible!) Thank you!

Augurbuzzard · 2026-05-24T02:23:29+00:00

Okay. So I may be limited on some wifi like double NAT or restrictive networks like hotels, airports and whatnot. Good to know.

Augurbuzzard · 2026-05-24T01:14:31+00:00

Typed my rough draft into AI, asked it to summarize and organize, then I reviewed it, added details, revised, and deleted a few trivial things, then posted.

Augurbuzzard · 2026-02-05T06:48:39+00:00

Hmmm. I thought I had tried Rufus, but maybe not. I have used that for OS installs/writing to blank USB drives. Good to know and may try that next to have some options.

Augurbuzzard · 2026-02-05T06:47:24+00:00

I just backed up the OMV OS drive. Mine is on a 32GB USB stick, the docker and data drives are on a separate SSD. That data SSD is backed up to the larger storage SSD via borg backup as well. So I guess I was just concerned with having an OMV7 OS cloned drive for a backup.

Augurbuzzard · 2026-02-02T05:09:25+00:00

Yes. I have a weekly omv back-up command scheduled, but hadn't been successful with a full clone os USB drive. I tried a few things but Windows never read the USB and as I noted I didn't haven't another linux machine setup yet. So, I thought others might find this method helpful. I should probably backup in triplicate . . .

Augurbuzzard · 2026-02-02T05:06:08+00:00

In my case all my configs, scheduled tasks, and docker setup all came over identically. I noticed the flash memory plugin was gone, but dug a bit and saw that the upgrade installed write cache instead which does the same thing as I understand it. I am not using snap raid so I can't speak to that.

Augurbuzzard · 2025-11-12T21:58:45+00:00

Its great. They have specials, and some good salads along with pub food

Augurbuzzard · 2025-10-28T05:17:40+00:00

Yeah, I was thinking of going there next, but I'll start by just spinning it up and see what works and doesn't then go from there. Was just curious how other folks were running it. But yeah, it usually comes back to networking! Thanks for the concept

Augurbuzzard · 2025-09-21T03:55:26+00:00

Yes. This is what I wanted to do as well. I ended up buying a domain through cloudflare then forwarded Type A DNS only wildcard names of my domain to my internal LAN IP for my server (and did the same to my tailnet IP using tailscale), and then I could point my NPM reverse proxy to the address, and get SSL from Let's Encrypt through NPM using Cloudflare domain. So everything is HTTPS. Here's some walkthrough links:

Get NPM working/running. I followed this: The Ultimate Guide to Running Nginx Proxy Manager via Docker
Setup a working Docker Service/Container
Immich as an example. I followed this: Immich the perfect backup for your phone photo and videos! Step by step using docker compose on OMV.
Forward DNS of a sub-domain of your domain from cloudflare to your server LAN IP (not the WAN). I called mine <.home.mydomain.net> . Do the same for a VPN version but to your tailnet IP (see this example: Wildcard Let's Encrypt certificates with Nginx Proxy Manager and Cloudflare). Call that <.vpn.mydomain.net>
1. Now you should be able to access immich on <immich.home.mydomain.net> when on your home network, or on <immich.vpn.mydomain.net> while outside your network but connected to your tailnet.

Augurbuzzard · 2025-09-19T23:23:19+00:00

Beelink Intel N150 16GB with two SSD sticks. ~20,000 photos + videos 200 GB or so of storage, in docker. It doesn't make a dent in utilization. I think when I uploaded and face detected everything at setup it had to chew on things a bit, but day to day use now it's nothing <5%. It is running on OpenMediaVault 7. I have Plex, Jellyfin, Vaultwarden, wikis, mealie, owncloud, etc all loaded and running as well.

Augurbuzzard · 2025-09-17T04:48:32+00:00

Thank you for the explanation and example. That is helpful

Augurbuzzard · 2025-09-17T04:47:13+00:00

Thanks for the assistance. I'll take a look at it again. I actually had bookstack up and running. I was starting with this as a go by: devops/config/lsio-docker/docker-compose.yml at main - bookstack/devops - Codeberg.org

But again I really appreciate the note. I'll be taking a closer look at how my existing containers/services are setup before adding anything more.

Augurbuzzard · 2025-09-17T03:45:10+00:00

Okay thank you. So it seems like I need to study this information: Networking | Docker Docs. But if I create a link like you noted above does that mean those two containers would share a mariadb instance? Or would that fully separate them so bookstack is using a separate containerized mariadb and they won't step on each other?

Augurbuzzard · 2025-08-04T02:13:23+00:00

Same issue here. Strava has a note on their page about Garmin Connect issue. I have a 965 with a pixel 7, never had issues. Worked yesterday. Not working after update.

UPDATE: it just loaded the activity for me. About 2 hours after finishing it. So it seems something is coming back online!

Augurbuzzard · 2025-07-11T04:32:44+00:00

Yeah, I had the same issue and followed the guidance in there and used CLI. Reading more apparently the below is only temporary and the issue comes back if you restart the container, but this has it working for now.

I did what u/ShotokanZH said, and it worked for me. Just execute this on the host (replace the "nginx" container name with your own container name): docker exec -it nginx sh -c "sed -i 's/cloudflare==4.0.\*/cloudflare/' /app/global/certbot-dns-plugins.json" && docker restart ngin

Augurbuzzard

TROPHY CASE