I avoided tailscale for so long because I was already using wireguard and I didn’t know you could self-host with headscale. But once I started using it with headscale the mesh design really is a big improvement to usability. I don’t miss having to carefully manage my config files and ip route rules.

I need to get setup with app connectors and then I think it’ll finally be a high enough wife-usability factor for me to remove some things I still have exposed over the internet.

DERP is the service that actually relays packets between tailscale connected devices when they are crossing a NAT (leaving one private network and going across the internet to another private network).

If you host headscale (the self-hosted community version of the tailscale control plane) and use it with tailscale, by default it will still use the public Tailscale DERP servers. Your traffic is still encrypted and not visible to them, but it does still rely on part of their centralized architecture even though you are hosting the control plane yourself.

That being said, you can just use the embedded DERP that ships with headscale, although there are some other considerations when doing that because it will need to be publicly on the internet, probably with a proper domain name and publicly trusted certificate.

Headscale includes an embedded DERP server but you need to enable it. Their example yaml has it disabled by default, which I assume is because it needs to be publicly available on the internet, requires HTTPS, and thus a certificate and other network/security considerations.

You can self host the control plane for Tailscale using a community project called Headscale. I use that along with Headplane which gives you a nice admin web UI.

Then you just use the tailscale client on devices like normal but you authenticate new clients with your endpoint instead of the centralized one.

The Haves and the Have Nots have always been at war. Occasionally there are agreements struck, but the Haves always want more.

This exactly. I’d use rsync to sync a directory to a location to then be backed up by kopia, but I wouldn’t use rsync exclusively for backups.

As I approach 40 I’ve been trying to make fashion choices that are something like ‘stylish aloof professor’ but I’m always worried that I end up in the ‘douchebag psuedointellectual buffoon’ category like this chode of a human being.

They are. Lots of motherboards still include these. There are a lot of special PS/2 input devices that are still around in business/industrial settings and gamers sometimes need them for use with flight sticks, steering wheels, mechanical keyboards etc.

Usually it’s a combo port now instead of a separate port for keyboard/mouse.

Your package is set to arrive between the hours of 0 and -2,147,483,647.

Definitely do not do tapes.

I’d also recommend Backblaze. Their S3 compatible storage is pretty affordable. I backup to a Kopia repo and then replicate to Backblaze nightly.

Tapes require so much more work to keep up to date and mght not even be cheaper over time.

I use GarHAge which uses open hardware and software and was pretty easy and cheap too. https://github.com/marthoc/GarHAge

Yup, I messed it up. I edited my post to be the correct way around.

Hemingway used to say “Write drunk, edit sober.” I’ve modernized that a bit for my own personal philosophy:

Code drunk. Debug drunk. Merge drunk.

I guess let me know when the revolution starts or when you figure out how to overthrow the two party system since they are clearly identical and equally bad.

Now I’m a big brain enlightened centrist who can feel good and smart about doing absolutely nothing to help anyone.

Thank you for the information, you can lecture me all about how much worse Democrats are when we share a cell in El Salvador.

I can’t wait to see the exact same argument play out every day in the Right Wing Gulag while a bunch of people try to convince me that the Left Wing Gulags would have been just as bad.

OpenSUSE gives out cute little chameleon plushies and if that’s wrong I don’t want to be right.

I never update my spell book and nothing bad has ever happened.

Help. Infernal imps somehow got inside my sanctum and used my scrying orb to send rude messages to the rest of the Circle.

Normally I could do this ritual with a single symbol but there is no support for primordial glyphs in this arcane framework unless you rewrite the whole thing in Elder Speech.