Tailscale

Brian’s running Ultramarine, which is Fedora underneath, and wanted SELinux disabled outright. Fair enough, plenty of people go straight for that. the disable route Two ways to actually do it. The config file way: sudo sed -i 's/^SELINUX=.*/SELINUX=disabled/' /etc/selinux/config sudo reboot Or through grubby instead, setting it as a kernel argument, which survives even if the config file gets reverted or overwritten somehow: sudo grubby --update-kernel=ALL --args="selinux=0" sudo reboot Check it landed after reboot: ...

Started with something dumb. Facebook wouldn’t load in Vivaldi or Firefox on the desktop. Worked fine on mobile. Figured it was a browser thing at first. Extension, cookies, the usual 💨 . Wasn’t that. why i thought i might need ipv6 Ran a curl test forcing each protocol separately, just to rule stuff in or out: curl -4 -I https://www.facebook.com curl -6 -I https://www.facebook.com IPv4 came back clean. HTTP/2 200, instant. IPv6 flat out refused to connect: ...

Why I’m writing this one down properly This site you’re reading right now runs on the same T620 as everything else … the NAS, the Samba shares, all of it. I got it working, but not in a straight line, and I want an actual record of the steps that worked, not a cleaned-up version that pretends I got it right first try. If I ever rebuild this box, this is the post I want to follow. ...

Why Tailscale, not a real VPN server I looked at running my own WireGuard setup by hand … port forwarding, managing keys myself, keeping track of which peer is which. Tailscale does all of that for you, on top of WireGuard, and the actual setup on each machine ends up being a handful of lines. Every device I own is on the same tailnet now: the T620 server, my NixOS desktop, and … the one that surprised me … a MacBook Air 6,2 from 2014 that has no business running anything modern smoothly, and does it fine anyway. ...