@malte I really like tailscale. I am using it for tunneling into my parents networks for tech support and for connecting to my home when on the go. Also have a Hetzner VPS connected as an Exit node for when I am on public networks.

I am tempted to use headscale, because I am worried about giving them the key to the castle, but personal accounts come with https://tailscale.com/kb/1226/tailnet-lock. So I hope I am good for now🤞

@malte the thing about ECS (with Fargate) is, I don’t know what OS is running the container. I don’t notice when the OS gets upgraded. I don’t know what hardware is running the container etc.

The trade-off is that it’s way more expensive and I have high variability in hardware performance, but that is exactly what I want when it’s about doing some live testing before committing serious time to it.

@malte finally had time to take a look.

It looks good but I think it isn’t quite what I am looking for.

With CoreOS, I still have to manage rollout of OS updates using an additional service (fleet lock?).
And to rollout an update to the containers I need to put docker swarm or k3s/k8s on top and manage that.

It’s doable but not quite „Here are some containers, please run them with a persistent disk“