There's also Netbird, worth checking out.

Enshitification happens.

I don't think that's a given necessarily, I think it's a common pattern under the vc funding -> IPO model.

But companies like Steam and Patagonia show that companies don't all have to follow the same predictable enshittification arc.

That's one way to look at it. I used to look at paid VC-funded services like that. I no longer do as I've observed services I paid good money for get more expensive much faster than inflation and decrease in quality and features at the same time. It's one reason I self-host many services I used to pay third parties for. I now look to alternatives from the get go and derisk existing dependencies. To be clear - profitability isn't merely the only problem. The ownership and its profit growth strategy (and expectations) are. Those are not the same in a decades old ISP and a VC-funded startup.

Merely being profitable today isn't a good predictor for stable prices and function over the long run for VC-funded services. I'm not planning to do major surgery to my setup every few years as yet another service shits the bed. The workstation/server where my self-hosted services run has last been reinstalled in 2014. Most of my config-as-code was written in 2019. I support a few families with this and I aim at maximum stability with minimal maintenance. So I use open source whenever I can and I often pay for development. I only integrated Tailscale in my setup because the clients are open source and because there's an open source server option.

I'm not saying to people - don't use Tailscale. In fact I often recommend it to new self-hosters. But I do that because there's a way out. So here I'm reminding people who care about a way out to check if this feature is escapable. :D

Can you share what components are you using for SSO, UI, etc.?

Just minor issue that maybe I’m not configuring correctly but when I use private resources I have to use the Ip instead of the alias. Looked online and it seemed other users were experiencing the same issue of not being able to use the alias. At this point I’m almost thinking it might be easier set up a second traefik container that just handles all the local connections and configure manually. Would love to just type my *.local address and have it be simple like that. Otherwise I love it and everything else it comes with! An alternative could be netbird, but want to see if I can figure out that small tid bit of pangolin first.