#tailscale · 8sync News

Database, Kubernetes, and SSH access without passwords

Border0 integrated with Tailscale replaces shared database credentials and connection strings with identity-aware access management for databases, Kubernetes, SSH, and RDP. Every connection is brokered through a Layer 7 proxy that understands database wire protocols, ties sessions to real user identities via existing SSO providers, and records query-level activity. Access policies can be scoped by role, time, region, or approval workflow, enabling just-in-time access rather than standing credentials. The result is a consistent audit trail across all sensitive systems, useful for SOC 2/ISO 27001 compliance and incident reconstruction. A free trial is available with no credit card required.

Authenticity is your competitive edge in open source

Alex Kretzschmar, Head of Developer Relations at Tailscale, discusses the unsolved problem of open source monetization — where volunteers build critical libraries while corporations profit without compensation. He argues that authenticity is a developer's competitive edge in open source communities, noting that people quickly detect inauthenticity. He also shares a productivity workflow using voice memos fed into an LLM to rapidly distill ideas before scripting and filming technical content.

Vaultwarden has been running on a Raspberry Pi Zero in a drawer for a year, and it's the most underrated thing I host

Running Vaultwarden on a Raspberry Pi Zero 2W as a self-hosted password manager is a low-cost, low-power alternative to cloud-based services like LastPass. The setup uses DietPi (skipping Docker to conserve resources), the Bitwarden browser extension pointed at the local server, and Tailscale for secure remote access. The Pi Zero 2W draws under a watt, can run off a power bank, and handles Vaultwarden's lightweight workload comfortably. The result is full Bitwarden feature parity — password generator, 2FA, vaults, autofill — with no monthly subscription and no third-party data exposure.

The $750 Plex price hike is the best thing that ever happened to my home server

Plex's new $750 lifetime pass price hike prompted a switch to Jellyfin, a fully open-source, self-hosted media server alternative. The author details how Jellyfin offers hardware transcoding out of the box, no mandatory cloud account, no relay servers, and free features that Plex charges for. Remote access was set up via Tailscale in about 15 minutes. The piece argues the price hike was ultimately a catalyst to move to a better, leaner setup and encourages other home server users to make the same switch.

Deploy a Private Hermes Agent on Render Securely with Pulumi, Modal, and Tailscale

A step-by-step guide to deploying a self-hosted Hermes AI agent (from Nous Research) as a single Pulumi program across Render, Modal, and Tailscale. The architecture keeps both the agent gateway and its chat UI (Open WebUI) as private Render services with no public URLs. Tailscale exposes the UI exclusively to devices on your tailnet via tailscale serve, while Modal runs the agent's code in ephemeral sandboxes. Secrets are managed through Pulumi ESC, the Render SDK is bridged from its official Terraform provider, and Docker images are built and pushed during pulumi up. The post covers the full TypeScript, Python, and YAML program, cost breakdown (~$50/month), security trade-offs, and extension patterns like cron scheduling and Telegram integration.