I’ve always wanted to do this however do I understand it correctly that I need to host headscale on a vps server that is not in my tailnet/home network?

Use the jellyfin kodi addon works very smoothly. I’ve been using it for two years and love it. I replaced all my chromecasts with kodi. It even has the approval of my wife.

I’m currently looking for something like this as well. I’ll have to give go access a try

I have vaultwarden in docker but I don’t expose my instance externally as you really don’t need to. Put the bitwarden app on your phone sign into the instance and it will work even if your instance is borked. You can’t add items but it works.

My suggestion, run it in docker and just back up the entire docker compose and folder structure as that includes the database as well.

If you want to expose it use nginx proxy manager its dead simple and awesome.

Firedragon on desktop( I use garuda Linux) and Mull on android

I’m currently using osmc on raspberry pi 3s with the jellyfin kodi add-on installed. Works like a charm and can also install other video addons as well. Its been rock solid and you can airplay and stream from your phone. Been running this replacement for a year.

If you try to browse to the tailscale website does it work?

If it does you could setup tailscale with an exit node at your house and tunnel your connection that way? Everything would then be coming from your home internet. I have had good success with tailscale being able to punch a hole through some pretty filtered firewalls.

I just picked up a banglejs 2 and I love it. I was using a galaxy smart watch 5 but didn’t work without gapps on my lineage phone. Its obviously not as good as the Samsung smart watch but I’ve been super happy with it. No creating accounts, getting tokens etc. Just pair it via Bluetooth and gadget bridge and you are good to go. Its a little pricey but for open source watch its awesome, I’ve heard good things about pinetime as well.

I’ve got a 80$ ZigBee centralite pearl thermostat. Took a bit to setup automations for it but its been rock solid

I do this too, have acls setup for my main LAN ips and all my internal hosts setup in opnsense in hosts override so they get redirected to NPM. Not sure if this is the correct way but it gives me all valid certificates. You could also do domain override and redirect just that domain to your NPM.

Hmm yeah makes sense, I just can’t do it since then I would need VPN app and home assistant app running 24/7 lol. I need location for home assistant and both appa are too much for my wife’s iPhone. I might tey again but with gpslogger instead of home assistant for location.

I would be interested to hear how this goes. I had this setup with tailscale but having it run 24/7 on both our phones drained the battery really quickly. That being said I was running full tunnel and also needed home assistant background location running as well.

Not a shameless plug at all. Damn this is super nice! Thanks for posting this I’m definitely going to be looking into this project!

This is why I have my cameras locally and can’t reach the internet. 2fa screw up, accidentally sending other peoples cameras to users then this!? Not sure how this company is still alive. They have no idea what they are doing security wise.

Good thing I have frigate nvr setup and don’t need their app at all. This is super sad since these are my go to cameras. I will still buy them since I put them on a vlan and block all internet access. This is sad though 😕