h_ramus

What are the upsides compared to Netbird which is based on Wireguard? Seems a bit overkill for my needs, can connect fine without a VPS.

I'm behind CGNAT and wouldn't want to expose devices to the internet.

After everything is setup, create a network route to distribute an ip to machines connected to you lan. I can't recall exactly but setting up Netbird was pretty straightforward when following the documentation. They also have their own for Opnsense - (https://docs.netbird.io/get-started/install/opnsense)

Managed Networks documentation

Radiohead OK Computer

I'm behind CGNAT. My OpenWrt router is a Netbird server that can be connected externally. Having the Netbird server in the router allows me to ssh devices or use services as if I was connected via WiFi.

There's documentation for Opnsense as well -(https://docs.opnsense.org/manual/how-tos/netbird.html)

For redundancy. In case one has issues or changes the terms and I'm kicked out. The netbird android app also seems to consume a lot of battery so I'm trialling which one is more battery efficient.

Awesome stuff. I'm currently reusing my router and media device to host a file sever, radicale (contacts, calendar and tasks) and immich. All this stuff on old HDDs taken from old laptops with a usb enclosure. Get redundancy with rsyncing between drives and everything was essentially low cost. It's not pretty or the fastest but good enough for my needs.

Netbird and zerotier servers in my router to connect my devices as I'm behind CGNAT. Essentially have contacts, calendar, tasks, files and photos all under my control. No fancy media player but don't have time to watch films or series outside. Immich was the last step to get rid of google stored files. Good riddance.

No reason not to use Endeavours these days, lazy man's Arch. Manjaro had a few issues and the opinionated approach regarding video codecs sealed it for me.

I can't take any Microsoft attempt at security seriously. One of the most important elements to improve security is to delete windows. Secure boot is lots of things but not secure.

Gives the illusion of security without being secure. Get the drive in a separate machine and, unless encrypted, secure boot is security theatre. Windows login password is similarly useless when the drive can be accessed when attached elsewhere.

Get rid of secure boot, install a granny-safe Linux distribution like Mint and get your drive LUKS encrypted.