-
Securing RemoteRails with Defguard: An Enterprise WireGuard VPN with Biometric 2FA
When building a self-hosted cloud appliance like RemoteRails, securing access is the first and most critical architectural decision. The instinct of many in the homelab and self-hosting communities is to reach for modern, popular mesh VPNs like Tailscale or NetBird. They are incredibly polished, “zero-config” tools that magically connect devices across complex NATs and firewalls.…
-
The Death of the Local Account: Building a Sovereign Identity Layer with Defguard OIDC
One of the most persistent architectural failures in the self-hosted ecosystem is “identity sprawl.” When engineers first begin building out a private infrastructure stack, they inevitably stand up a dozen disparate services: a chat server, a file sync instance, an email relay, and a password manager. By default, every single one of these services maintains…