Well, if they hadn’t posted here, I, for one, would never have become aware of the issue, and I’m glad I have!

… So… Is it true or not?!

brick it 4 times

I’d be impressed if the battery lasted long enough for that!

I just spent an hour trying to get this installed in a Proxmox VM. No dice. After install, it just boots to the GRUB rescue prompt. Oh well, seems like a cool idea.

Awesome! You too.

Let me know how it works out for you! I’m happy to be able to share this. I was very pleased with myself but had no one to tell haha. I actually have several copies of this set up with each Gluetun instance connected to different countries. Then, changing country is as easy as changing your tailnet exit node!

I have solved this problem! The trick is to use two Docker containers:

1. Gluetun (https://github.com/qdm12/gluetun): set this up to connect to your VPN.
2. Tailscale (https://tailscale.com/kb/1282/docker/): set this to use the Gluetun network.

Here is an example docker-compose.yml:

version: "3"
services:
  gluetun:
    image: qmcgaw/gluetun
    container_name: gluetun
    # line above must be uncommented to allow external containers to connect.
    # See https://github.com/qdm12/gluetun-wiki/blob/main/setup/connect-a-container-to-gluetun.md#external-container-to-gluetun
    restart: unless-stopped
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    volumes:
      - ./gluetun:/gluetun
    environment:
      - VPN_SERVICE_PROVIDER=airvpn
      - VPN_TYPE=wireguard
      - WIREGUARD_PRIVATE_KEY=xxx
      - WIREGUARD_PRESHARED_KEY=xxx
      - WIREGUARD_ADDRESSES=xxx
      - WIREGUARD_MTU=1320
      - SERVER_COUNTRIES=United States
      # See https://github.com/qdm12/gluetun-wiki/tree/main/setup#setup
      # Timezone for accurate log times
      - TZ=America/New_York
      # Server list updater
      # See https://github.com/qdm12/gluetun-wiki/blob/main/setup/servers.md#update-the-vpn-servers-list
      - UPDATER_PERIOD=24h

  tailscale:
    container_name: tailscale
    cap_add:
      - NET_ADMIN
      - NET_RAW
    volumes:
      - ./tailscale/var/lib:/var/lib
      - ./tailscale/state:/state
      - /dev/net/tun:/dev/net/tun
    network_mode: "service:gluetun"
    restart: unless-stopped
    environment:
      - TS_HOSTNAME=airvpn-exit-node
      - TS_AUTHKEY=xxxxxxxx
      - TS_EXTRA_ARGS=--login-server=https://example.com --advertise-exit-node
      - TS_NO_LOGS_NO_SUPPORT=true
      - TS_STATE_DIR=/state
    image: tailscale/tailscale

I have found Nginx Proxy Manager to be a huge time-saver for configuring nginx and certbot.

Fair point, but that probably wouldn’t be a “big difference” for a first time user.

!selfhost@lemmy.ml

(put an “!” in front)

I don’t see Cryptomator in the comparison. Doesn’t it have a similar feature set?

Consider the Remarkable 2. It is a little Linux computer that allows root access by SSH. It’s moddable, can markup pdfs, and is pleasant to write on. If you get one, just get the bare tablet from the manufacturer. Get a folio and pen from Amazon for way cheaper. Also, you can get $50 off with a referral code from someone who already has one.

I don’t think that’s fair. I’ve taken gun/hunting education classes from some volunteer instructors that seemed to me to be about the most serious, responsible people I’ve ever met.

They don’t exist. Believe me, since I finally put my old LG V20 out to pasture, I’ve been waiting. The closest thing is the Fairphone, but it doesn’t support all US LTE bands.

It’s too bad Android didn’t lean more into it’s relative freedom. Instead, almost all Android manufacturers have followed Apple’s lead closely. I have to believe there’d be a sizeable market for a flagship Android phone with, say, a removable battery, headphone jack, SD card slot, and an easily unlocked bootloader.

I agree with you strongly. We have the technology, it’s just pointed at the wrong crowd. The eyes of the surveillance state should be on the rich and powerful, not the masses. The price of power should be the loss of privacy.

My (often unpopular) opinion is: none. Our government agencies should exert their efforts improving privacy and security rather than subverting it. We should be a nation of white hat hackers.