My home lab runs a few applications need remote access. I have wireguard tunnels setup for general use case, but when it come to Tesla in car experience, my journey started.<\/p>\n\n\n\n
This is the simplest solution, just connect to the wireguard tunnel and share the hotspot with Tesla.<\/p>\n\n\n\n
But this solution requires root access for Android and not working for iOS, it’s a quick prototype I started.<\/p>\n\n\n\n
After the prototype, I added a small travel router to the solution.<\/p>\n\n\n\n
I got a MikroTik mAP lite router, setup it connect to wireguard tunnel, use my personal hotspot for WAN, boardcast a new SSID for Tesla.<\/p>\n\n\n\n
This solution perfectly working, the router is very small and can be powered by USB port.<\/p>\n\n\n\n
The next improvement I try is using the builtin network link. I setup a Discord bot, when access from unknow IP, it send me a message and let me approve or deny the future requests.<\/p>\n\n\n\n
But Tesla cellular network changes IP really fast, it usually takes 3-5 times before I can whitelist a stable IP address. Further more, the IP looks like NAT through Tesla networks, potential shared with other cars, it’s not 100% safe.<\/p>\n\n\n\n
The final solution is Authentik authentication and proxy the public request with authorization. I setup my accounts and disabled the registration. <\/p>\n\n\n\n
This is a balance of convenience and security.<\/p>\n\n\n\n
<\/p>\n\n\n\n
Lastly, I noticed there are some website provide a technique let the browser go full screen by jump through Youtube.<\/p>\n\n\n\n