Just exposed Immich via a remote and reverse proxy using Caddy and tailscale tunnel. I’m securing Immich using OAuth.

I don’t have very nerdy friends so not many people appreciate this.

  • @[email protected]OP
    link
    fedilink
    English
    133 days ago

    I want to be able to upload/download/share my photos from anywhere in the world without using a VPN. Additionally, this satisfies the wife requirement. It works in the background without her needing her to turn on the VPN. I don’t want her to keep asking me how do I turn on the VPN? If it’s just me, then no issue, I’ll use a VPN.

    • @[email protected]
      link
      fedilink
      English
      8
      edit-2
      2 days ago

      Yeah, you always have to account for the wife factor. Same reason I’m using Plex instead of Jellyfin for my video hosting; I’d personally prefer Jellyfin, but the wife factor (really the mother-in-law factor, but whatever…) demands that it doesn’t require a ton of config on the user’s end. If the goal is to encourage use by your family, it can’t be fiddly or difficult to set up on their end.

    • @Hawk
      link
      English
      1
      edit-2
      2 days ago

      To be fair, wireguard is pretty painless.

      • Encrypt-Keeper
        link
        fedilink
        English
        82 days ago

        Unless you’re on IOS that will shut your VPN off regularly. Or you want somebody else to be able to access what you’re hosting without having to walk theme through a VPN setup they won’t understand.

        • @[email protected]
          link
          fedilink
          English
          224 hours ago

          I’ve never had iOS shut my VPN off, and I use a kill switch so I would immediately know.

        • @[email protected]
          link
          fedilink
          English
          2
          edit-2
          2 days ago

          I have a couple dozen customers on ios that use their camera servers via Tailscale. Never had a peep about that sort of thing.

          And the last is the typical sort of “convenience” that gets people popped.

          • Encrypt-Keeper
            link
            fedilink
            English
            42 days ago

            You’re hearing about it now. It’s an issue with the way iOS handles background tasks and there isn’t any way to fix it. It’s just how the OS works.

            • @[email protected]
              link
              fedilink
              English
              12 days ago

              Well, apparently a bunch of farmers are smart enough to press a button without even bothering me about it.

                • @[email protected]
                  link
                  fedilink
                  English
                  32 days ago

                  Yah, imagine my surprise, it’s almost like people are smart enough to manage a VPN without you holding their hands.

                  • Encrypt-Keeper
                    link
                    fedilink
                    English
                    22 days ago

                    Manage, but not set up. Something tells me you had to do that part for them. And while pushing a button to start your VPN back up every time you want to access your remote service isn’t hard, it’s a nuisance that can be avoided in situations where it isn’t necessary in the first place.