openwrt

Author: dezren39

doc/openwrt

@@ -0,0 +1,22 @@
+- set password
+  - todo: use passwordless root with ssh key (please don't hack me uwu)
+  - todo: only use password for http interface
+- ```
+# ssh in from a machine with tailscale web login
+# (do not change ssh interface to tailscale,)
+# (advertise lan through tailscale as a route,)
+# (don't want to lockout rest of lan from ssh,)
+# (at least for now.)
+opkg install tailscale
+# these packages aren't enough but pretend they do something,
+# ipv6 etc dont work and you need to manually add fw rules anyways
+opkg install iptables-nft kmod-ipt-conntrack kmod-ipt-conntrack-extra kmod-ipt-conntrack-label kmod-nft-nat
+tailscale up
+# open link
+tailscale status
+# add tailscale interface https://openwrt.org/docs/guide-user/services/vpn/tailscale/start
+# add tailscale firewall zone https://openwrt.org/docs/guide-user/services/vpn/tailscale/start
+ip address show tailscale0
+tailscale up --advertise-routes=10.10.0.0/16 --accept-routes --advertise-exit-node
+# from the tailscale web interface, approve the route, approve the exit node, disable key expiry
+```