I'm trying to set up a system where I can access my personal media library from anywhere on any device while ensuring smooth playback and keeping the original audio/visual quality intact. I also want my regular streaming apps like Netflix, YouTube, and Audible to function properly. At the same time, I want to keep ExpressVPN active on all my devices for privacy, without compromising the security of my home network or my Dad's network, where my server is located.
To sum it up, I'm looking for a way to stream any of my media—whether it's self-hosted or through a subscription service—on any device and from anywhere, all while keeping ExpressVPN on and not having to open any ports or risk security.
I've set up Tailscale on my home server, and it works great for securely accessing my media. However, on Android devices like my Samsung Galaxy A55 or Fire TVs, enabling Tailscale turns off ExpressVPN, and vice versa, due to limitations with Android and FireOS where only one VPN can be active at a time.
I've explored several solutions:
1. Running Tailscale only on the server and keeping ExpressVPN on my devices.
2. Trying split tunneling with Tailscale on my phone, but that didn't work since Android shuts down one VPN when the other is turned on.
3. Looking at port forwarding to allow Plex access but worried about exposing it to the public.
4. Considering Tailscale Funnel, though that raises security concerns.
I'm reaching out for advice from anyone who has dealt with similar technical restrictions. Is the option of having Tailscale only on the server the best way to go? Are port forwarding or using the Funnel safe? How can I ensure full remote access to my services without opening myself up to risks?
3 Answers
I skimmed through your setup; sounds pretty complex. You shouldn’t be opening ports on your router for security reasons, so using a reverse proxy like Caddy could help manage access without compromising your network security. It might be worth looking into!
I noticed you mentioned using ExpressVPN a lot. Just curious if you're tied to it or if you've explored alternatives like Mullvad? Tailscale has a routing add-on that works well with Mullvad for exit routing, and some users have found that it improves their setup.
Have you thought about using Gluetun as a solution? It lets you run Tailscale and ExpressVPN together, which might eliminate the issue of them conflicting. This way, you can keep both running on your device simultaneously without needing to switch.
What actually is a reverse proxy like Caddy? I'm unfamiliar with how that works!