[dev] Remote access - Tailscale

[ihrapsa]

⚠️ Encrypting webcam stream takes quite a lot of CPU power so this approach might not be recommended ⚠️

Home network: webcam stream (no encryption) - low CPU load
Remote VPN access: webcam stream encryption - increased CPU load

This will enable remote access to the box. Tailscale is a very simple to setup VPN without the need to create your own server or mange configs or open/forward ports. At its core it's based on WireGuard.

❗ Apparently Tailscale is now officially in Openwrt package repository. Yey! See here and here

Note!
Tailscale package has a kernel module dependency called kmod tun. Due to the box not officially supported yet, kmods can only be installed first day until the next daily build happens. To overcome that I either have to compile a new bin file with the kmod preinstalled or as a separate package that can be manually installed later.

❗ New .bin with kmod tun coming soon ❗

---

🔢 Steps to install and configure Tailscale on the box:

1. Register to Tailscale
2. Install packages

opkg update && opkg install tailscaled tailscale

3. Start and enable daemon service

/etc/init.d/tailscale enable
/etc/init.d/tailscale start

4. Authenticate the box with the given URL:

tailscale up

5. In your Tailscale account you should see your box with an ip assigned

📶 Tailscale for OpenWrt here - thanks adyanth
🔜 Tutorial to install tailscale daemon on OpenWrt ❗ coming soon... ❗

🔢 Steps to configure Tailscale - thanks denkyem

1. Make sure you've registered an account to tailscale
2. Install Tailscale client on your phone/tablet/PC/mac (the remote device)
3. Make sure Tailscale is configired on the box (see above )
4. Make sure both devices appear in your Tailscale account:
   
5. In your moonraker.conf add your remote device ip under trusted_clients in [authorization] block

[authorization]
force_logins: True
cors_domains:
  *.local
  *.lan
  *://app.fluidd.xyz

trusted_clients:
  10.0.0.0/8
  127.0.0.0/8
  169.254.0.0/16
  172.16.0.0/12
  192.168.0.0/16
  FE80::/10
  ::1/128
  100.115.167.93   #<-------- this is the remote phone ip found in your Tailscale account

6. To access the box remotely make sure Tailscale app is running and active on your remote device
7. Access URL http://100.99.160.51 #<-------- this is the ip of the box found in your Tailscale account
8. Type the same thing here when prompted