https://thyago.link/tags/tailscale/Recent content in Tailscale on Thyago SeuglingHugoen-usSun, 15 Mar 2026 00:00:00 +0000https://thyago.link/blog/zero-trust/Sun, 15 Mar 2026 00:00:00 +0000https://thyago.link/blog/zero-trust/<p>For years, my home lab ran on a patchwork of port forwards, dynamic DNS, and good intentions. It worked — mostly — but every exposed port was a liability, and I knew it. This is the story of how I tore it all down and rebuilt on a <strong>zero-trust foundation</strong>.</p> <h2 id="why-zero-trust">Why Zero Trust?</h2> <p>The traditional model assumes that anything inside your network is safe. Zero trust flips that entirely: <em>verify everything, trust nothing</em>. Every request is authenticated, every connection is encrypted, and no service is reachable unless explicitly permitted.</p>