Tailscale Exit Node Logic: Why Auto-Select Fails for Security and How to Fix It
Tailscale's auto exit node optimizes for latency, not trust. Here's how auto-select compares to a pinned, dispatcher-enforced exit node on laptops.
#tailscale
5 posts
Firewall Zone Persistence: Why firewalld Runtime Changes Vanish and How to Pin Them
firewalld runtime changes disappear on reload or reconnect, and NetworkManager can override zone bindings. Here's how to make firewall zones persist.
Trust the Tailnet, Not the Network: Automating Wi-Fi Hardening with NetworkManager Dispatchers
Treat every Wi-Fi network as hostile: a NetworkManager dispatcher that pins a locked-down firewalld zone and forces a Tailscale exit node on connect.
Tailscale Kernel TUN in Unprivileged LXC: Direct SSH Without Userspace Networking
Two lines in a Proxmox LXC config give Tailscale a real kernel TUN device: direct peer-to-peer SSH, working UDP, and the container stays unprivileged.
Tailscale Subnet Routers: Accessing Your LAN Without the VPN Headache
Stop installing Tailscale on every single device. Use a subnet router to expose your home network and IoT gear without traditional VPN complexity.