#wireguard
2 posts tagged wireguard.
The gateway: self-hosted NetBird behind Caddy, with a relay
Now the WireGuard control plane. This part stands up self-hosted NetBird on a DMZ gateway, fronts it with Caddy issuing TLS over DNS-01, points it at the SSO for auth, and adds a coturn relay for the peers that can't connect directly.
Why we're tearing out a VPN that works
The old OpenVPN setup wasn't broken. It was a pile of per-user certificates and a manual onboarding ritual. Here's the case for replacing it with a self-hosted WireGuard mesh tied to the directory, and the one rule that keeps the swap from becoming an outage.