Implement Tailscale VPN #57
Labels
No labels
Improvement
bug
docs
go live
hourly work
improvement
invoiced
monitoring
new feature
security
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: springup/cmc-sales#57
Loading…
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
User auth via Tailscale
Replace HTTP Basic auth with Tailscale
Also replace nginx with Caddy+DNS challenges for HTTPS certs.
Should also move DNS from Google Cloud DNS to Cloudflare.
Should also enforce 2FA on GSuite accounts.
Can add tailscale ACL to only allow from CMC office IP address (if it's static)