Set up auto-renewing HTTPS certificates on a GLiNet KVM

I’m quite fond of the small little IP KVMs that have become more and more available lately. My favorites are the JetKVM and the GliNet Comet series. I have 2 of the Comets that I use internally, and I mostly access them via their Tailscale ts.net names. I could do I what I usually do and put them behind a reverse proxy, but there’s one of these that I keep in my work bag and take with me onto client sites, so there’s no reverse proxy in that scenario. ...

October 2, 2026 · 2 min

Routing to Tailscale clients from a local network with OPNSense

Overview Effectively, what we’re trying to accomplish here today is the opposite of a Tailscale Subnet Router. As in, allowing clients on our local network to talk to devices via their Tailscale subnet IP addresses. When I started looking into how to do this, I could not find a complete guide on the topic. I’ll do my best to do this start to finish so that anyone else can follow along with me. ...

August 15, 2026 · 4 min

Fluxer Over Tailscale

This weekend I’ve been playing with setting up a self-hosted Fluxer instance. In my traditional fashion, I made things much harder by myself by refusing to use their provided Caddy setup, and instead using Traefik. And for an additional challenge - I wanted this to be completely inaccessible from the public Internet, instead using my Tailscale mesh network. The setup required some heavy modifications to the Docker Compose file provided by Fluxer’s team, and a few tweaks to livekit.yaml. ...

June 20, 2026 · 2 min