Remote access solution

[rustic pike]

I’m running a home server on ubuntu that hosts a few self-hosted tools and have some devices which need remote access:

-OpenWebUI connected to my local ollama LLM
-n8n (planning to use it later for automation tasks)
-Home Assistant for controlling tasmota smart plugs
-my main (windows) pc that runs sunshine, which i connect to with moonlight for low-latency remote access.

Everything works perfectly inside my local network, but i want to be able to use all of this securely and privately when I’m away from home.
Would Tailscale (Headscale) allow me to do this? I'm very inexperienced in terms of netowrking.

If yes, would it affect the latency of the "Sunshine/Moonlight" setup?

[autumn moss]

Tailscale (using their infrastructure or Headscale) can do this. Latency is going to depend on many factors, including where you connect from, whether you’re using DERP, and so on. I do remote access over Tailscale regularly (using NoMachine, not Sunshine/Moonlight) and get good results.

[rustic pike]

Thanks for the info! Would you recommend Headscale if privacy was a concern? As someone with 0 experience (and having read online that the setup would be more complicated and have no UI) I was a bit concerned.
Should I also look into further security measures such as fail2ban and the usual hardening steps, or does Tailscale by itself bring enough security?

[autumn moss]

I’m a cybersecurity professional. I’ve decided to use Tailscale’s infrastructure. The tradeoff for me was about performance, availability, and cost. I am choosing to use Tailnet Lock, which is probably overly paranoid for most. But my tailnet is small and so far it’s worked well for me.

I would add that without experience I would hesitate to recommend Headscale.

[rustic pike]

Thanks once again for all the detailed info! Will look into Tailnet Lock and Tailscale's infrastructure