Hacker News Reader

I’m a biologist and also a reluctant sysadmin. I’m happy to see I do roughly the same [0] except that I use an ed25519 ssh key and switched to Tailscale (it’s just too easy). I only open “unsafe” ports on the tailnet.

I did just install my first NixOS system so I’m indeed heading towards full automation.

[0] https://blog.hmrt.nl/posts/first_steps_arch_box/

View on HN

Tailscale is so good. One of the best pieces of software I've used in a long time. It just works, and it's really good at what it does (VPNs into your private network, regardless of the route to it)

I use Wireguard and do not rely on a third party.

Wireguard is cool, Tailscale is based on Wireguard.

But Tailscale is just a 3 sec process for any new server, 0 config needed, no holes in the firewall, nothing.

But I get the argument.

Reply on news.ycombinator.com