The story of renting a VPS for development and using my home GPU from there

Hello! I'm Kikyujin 🎈
Masters, are you having fun vibe-coding with your little AI daughters today too? 🦊🍼
Well, this time I'm going to talk about server stuff I was doing while clattering away (??) without even sightseeing in Busan.

Last time, I wrote about how I turned my home GPU machine into a demo server via a VPS 👇️

This time, it's about changing the routing to account for multiple people working on it from there.
GPU servers aren't getting much cheaper in the current situation, so I hope this serves as a reference for using GPU machines at home or the office from the outside 😁

The demo is mostly done too 🤔

While getting the client to check it every so often, the demo app feels like it's mostly finished.
Until now, the configuration was setting up a VPS as an entrance for the frontend and pulling everything into the home LAN (AI-kan LAN).

Well, if it's just a limited number of people accessing it for a short time, this is fine.

But when I think about it calmly...

• I want to let the staff touch the server but the AI-kan's internal system also lives on the same machine, so they would have free access 😂

• If for some reason the home machine goes down, everything dies along with it 😇

• If for some reason the home internet goes down, that's another death 😇

So, I decided to move the app to a different VPS from the frontend and leave only the GPU service at home!

Well, the GPU service is designed so that it won't be fatal even if it goes down

(it can be faked with a fallback if it's missing), so it's okay!

So what will I do? 🖥️

I'll divide it into three layers 👇️

Points:

• The VPS for demo operation does not belong to the AI-kan tailnet.
  👉️ Even if staff log in to the VPS for demo operation, they cannot reach the AI-kan internal network.

• The section that goes out to the public internet is protected by HTTPS + Bearer token authentication.

• Gateway VPS → Home is within the Tailscale VPN, so it is encrypted.

Things I learned / Thoughts 🎈

• Even using two VPS instances, the monthly cost doesn't even reach the price of 10 cups of coffee🤣

• "Apps in the cloud, GPU at home" might be the optimal solution for SOHO🤔

• Not being in the tailnet = physically unable to go beyond that point, a simple sense of security.

Actually, I was thinking about setting up a tailnet just for my home development equipment and the demo VPS, but multi-hop SSH is just too much of a hassle so I stopped... But I know that using something like a Raspberry Pi as a proxy is a good idea, so those who want to pursue further security should consider it...