I spent the weekend trying to setup WireGuard VPN to access my Node-Red/farmOS setup outside my LAN.
Shouldn’t be too hard, but I could never succeed. No matter what I tried. Small detail I guess…
But then I came across Tailscale, based on the Wireguard protocol.
It was really easy to setup. Just install, and authenticate with Tailscale.com. Now all connected units are accessible with their hostnames and all. No fuzz.
I do roughly what I’ve described in this post: Internet-accessible Local-first farmOS hosting (Of course this setup is only a good fit if you actually want your farmOS install to be internet accessible.)
TL;DR; Host farmOS on my local network, but use a cloud IP address and reverse ssh port forwarding to make farmOS accessible via the same IP/DNS locally and on the public internet. Then use firewall rules on the local network to reroute requests to/from the cloud IP directly to/from the farmOS server - giving local performance/reliability.
I use WireGaurd to connect house to farm yard find it works well, I used piVPN to set it up, it’s like a WireGaurd wizard which simplified it.
I also use a Cloudflare Tunnel for accessing any web applications without the need for client software for a more hosted experience while maintaining security. I’m using the Cloudflare addon for Home Assistant.