Raspberry Pi as a Hardened WireGuard VPN Gateway with Split-Tunneling
Technical tutorial on deploying a secure, high-performance WireGuard VPN gateway on Raspberry Pi with selective split-tunneling and nftables firewall hardening.
5 articles in this category
Follow this category by RSSTechnical tutorial on deploying a secure, high-performance WireGuard VPN gateway on Raspberry Pi with selective split-tunneling and nftables firewall hardening.
Technical tutorial on deploying a self-hosted Jellyfin media server on Raspberry Pi 5 using V4L2 hardware acceleration for real-time transcoding at minimal power consumption.
Technical tutorial on deploying a fully automated, self-hosted Raspberry Pi home laboratory with Traefik v3 reverse proxy, zero-touch SSL, and Watchtower image automation.
A stack that runs is not a stack that keeps running. Six lines per service decide whether a power cut, a hung process, a log file or an unpinned tag takes the machine down – and on a Pi one of them is silently ignored until a line is added to the boot configuration.
A 25 Wh battery pack does not deliver 25 Wh. Converter losses, the voltage floor and the shutdown reserve take about a third before the first minute of runtime is counted – and the third is the part that has to be planned.