Just exposed Immich via a remote and reverse proxy using Caddy and tailscale tunnel. I’m securing Immich using OAuth.

I don’t have very nerdy friends so not many people appreciate this.

  • kratoz29English
    2•2 days ago

    Tailscale?

    Is this setup advisable for the CGNATED environment?

    • @ikiddEnglish
      3•2 days ago

      This is necessary for CGNat ISPs. That or cloudflared or ngrok or the like. Because you aren’t really routable on a CGNAT address.

      • kratoz29English
        1•2 days ago

        In a nutshell, CGNAT users must spend money for something that people with IPv4 addresses can do for free 😔

        • @[email protected]English
          2•1 day ago

          We wouldn’t be in this mess if we switched to ipv6, but nOoOooOo… we can’t possibly do that…

          • kratoz29English
            1•19 hours ago

            Actually my ISP supports IPv6 (it is very erratic though) so I can access some of my services outside through it without using VPNs (only using a reverse proxy for the 443 port), but still is very annoying when I want to use them with IPv4 only networks, such as my carrier mobile data, I suffer from this especially when wanting to use Plex.

          • @ikiddEnglish
            1•1 day ago

            Lack of routability is a feature for ISPs, not a bug.

      • kratoz29English
        1•2 days ago

        Ah, I figured… I used to do this with Wireguard instead of Tailscale.