Running Headscale on my own infra (and finally killing my WireGuard setup)

Hello everyone 👋 This one started in the dumbest possible way: I wanted to check on my 3D printer from outside my house. I have a Bambu printer running in LAN-only mode, and I use OctoApp to control it from my phone. Works great at home. Useless the moment I leave. The usual answer is OctoEverywhere, which is a lovely project, but it means my printer traffic goes through someone else’s servers, and I already run enough infrastructure that this felt silly. So I went looking for a way to just… have my home network with me. And I ended up rebuilding my entire remote access setup in an afternoon. What I had before My old setup was, in hindsight, a bit of a Rube Goldberg machine: A Hetzner VPS running WireGuard A node at home connected to that WireGuard tunnel Nginx Proxy Manager on that node A Pi-hole for the WireGuard side, resolving things to 10.0.0.x addresses Another Pi-hole for my actual home network, resolving to 192.168.0.x Two Pi-holes. Two address ranges. Two mental models of…