• FauxLiving@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    12 hours ago

    You only have to give them access to a specific port on a specific machine, not your entire LAN.

    My VPN has a ‘media’ usergroup who can only access the, read-only, NFS exports of my media library.

    If you’re just installing Wireguard and enabling IP forwarding, yeah it would not be secure. But using a mesh VPN, like Tailscale/Headscale, gives you A LOT more tools to control access.

    • WhyJiffie@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      2
      ·
      31 minutes ago

      yeah but even with plain wireguard the peers can be limited. you just have to figure out the firewall rules, or use opnsense as your wireguard server because it figures the harder part out for you.