this post was submitted on 09 Jun 2025
698 points (98.6% liked)

Selfhosted

46672 readers
762 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

Corporate VPN startup Tailscale secures $230 million CAD Series C on back of “surprising” growth

Pennarun confirmed the company had been approached by potential acquirers, but told BetaKit that the company intends to grow as a private company and work towards an initial public offering (IPO).

“Tailscale intends to remain independent and we are on a likely IPO track, although any IPO is several years out,” Pennarun said. “Meanwhile, we have an extremely efficient business model, rapid revenue acceleration, and a long runway that allows us to become profitable when needed, which means we can weather all kinds of economic storms.”

Keep that in mind as you ponder whether and when to switch to self-hosting Headscale.

you are viewing a single comment's thread
view the rest of the comments
[–] Wahots@pawb.social 44 points 1 day ago (7 children)

Are there better alternatives? I was planning on using tailscale until now. :P

[–] avidamoeba@lemmy.ca 51 points 1 day ago (1 children)

For me personally, the next step is using Headscale - a FOSS replacement of the Tailscale control server. The Tailscale clients are already open source and can be used with Headscale.

Someone else could give other suggestions.

[–] JoMiran@lemmy.ml 13 points 1 day ago (1 children)

I've been meaning to switch from Tailscale to Headscale but I have been to busy. Do you have any instructions, write-ups/walk-thrus you could recommend to set this up? I have three sites with 1GB internet I can use. One has a whole house UPS but dynamic IP, another has a static IP but no UPS, and the third is Google fiber with no UPS, but I can use the app to get the current IP anytime. I also own a number of domain names I could use.

[–] avidamoeba@lemmy.ca 8 points 1 day ago* (last edited 1 day ago)

No writeups. I tried following the Headscale doc for a test last year. Set it up on the smallest DigitalOcean VM. Worked fine. Didn't use a UI, had to add new clients via CLI on the server. When I set it up for real, I'd likely setup a UI as well and put it in a cloud outside of the US. It would work at home too but any other connection would die if my home internet dies or the power does. E.g. accessing one laptop from another, or accessing the off-site backup location.

[–] exu@feditown.com 21 points 1 day ago (1 children)

A bunch really, Headscale with Tailscale client, Nebula VPN, Netmaker, Zerotier.

[–] Andres4NY@social.ridetrans.it 7 points 1 day ago (1 children)
[–] exu@feditown.com 1 points 1 day ago

Yeah, I also use that, but it's not quite as easy as the others. Either you're open to the whole network or you need some form of external key management to add/remove peers from your network.

[–] MangoPenguin@piefed.social 26 points 1 day ago* (last edited 1 day ago) (2 children)

Wireguard if you're just using it yourself. Many various ways to manage it, and it's built in to most routers already.

Otherwise Headscale with one of the webUIs would be the closest replacement.

[–] nfreak@lemmy.ml 1 points 13 hours ago (1 children)

I decided to experiment a bit with Headscale when the wg-easy v15 update broke my chained VPN setup. Got it all set up with Headplane for a UI, worked amazingly, until I learned I was supposed to set it all up on a VPS instead and couldn't actually access it if I wasn't initially on my home network, oops.

I might play around with it again down the road with a cheap VPS, didn't take long to get it going, but realistically my setup's access is 95% me and 5% my wife so Wireguard works fine (reverted back to wg-easy v14 until v15 allows disabling ipv6 though, since that seemed to be what was causing the issues I've been seeing).

[–] MangoPenguin@piefed.social 1 points 7 hours ago (1 children)

Why does it need to be on a VPS? It seems to work on a home network when I played around with it.

[–] nfreak@lemmy.ml 1 points 36 minutes ago

Well a VPS or an exposed service, but I feel like the latter ends up somewhat defeating the purpose anyway.

When running locally (not exposed), it worked great until I tried to make the initial connection from mobile data - can't establish a connection to headscale if it can't reach it in the first place. Unless I'm mistaken, the headscale service needs to be publicly accessible in some way.

Pivpn is really easy, and since pivpn is just scripts, it always installs current wireguard even if they lax on updating pivpn that often.

[–] candyman337@sh.itjust.works 13 points 1 day ago

I use the built in wireguard VPN in my router. If you just need local network access elsewhere it's usually really easy to setup if your router provides it. I would look into it!

[–] 4k93n2@lemmy.zip 9 points 1 day ago (2 children)

ive been eyeing up netbird but havnt got around to trying it yet. its fully open source at least, and theyre based in germany is anyone cares about that

[–] avidamoeba@lemmy.ca 9 points 1 day ago (1 children)

Just looked at NetBird, it looks suspiciously similar to Tailscale in what it does except they also got an open-source control server. They have self-hosting doc right in their web site. Looks interesting. Can't find much about the company other than it's based in Berlin and it's currently private - Wiretrustee UG.

[–] nickhammes@lemmy.world 3 points 1 day ago

What's the difference with their open-source control server, from headscale? That it's officially published by the company?

[–] hobbsc@lemmy.sdf.org 1 points 1 day ago

i used netbird heavily at my last job and i use it for a few things at home. it works pretty well.

[–] milicent_bystandr@lemm.ee 4 points 1 day ago

I use Nebula. It's lightweight, well-engineered and fully under your control. But you do need a computer with a fixed IP and accessible port. (E.g. a cheap VPS)

You can also use "managed nebula" if you want to enjoy the same risk of the control point of your network depending on a new business ;-)

Depends on your use case. If you're just looking to expose services and are ok having them publicly accessible, there's Cloudflare Tunnel, or you can run WireGuard on a cheap VPS