Migrate to another provider now if it’s a genuine concern. Migrate to OIDC if you have a server that you can make accessible publicly (though this creates the issue of why use tailscale if you’re opening your server to the web for this)
Alt: use headscale and stop relying on corpo bullshit. Then you can earn the ire of microsoft and still maintain remote access
Thanks for sharing. Iirc, having multiple accounts on GitHub itself is against their ToS. I fear it might increase the chance of getting banned for violating their TOS. Correct me if I’m wrong though.
Is that is against TOS then every dev I know is fucked, we all have a personal and work account. My work requires an account made with a work email to use fucking coopilot, and I need a personal account.
I had the same concern and posted on reddit about it long ago before deleting my reddit. Basically chose github at sign up as I didn't even know what OIDC was at the time. Then built a whole network around it with github as a single point of failure. There's no way to migrate it to another sign in method. Email sign up is not offered. The reasoning from Tailscale is that then they need to manage the whole extra user identification thing as well.
Anyway this is old but the solution is either tear down the network and start again with OIDC (can use codeberg for that). Or if like me that means reconfiguring 40 docker containers and a whole network built around the magic dns there is another option.
You need to login and add another user and give that user admin rights as well. I ended up adding that and then setting it up so they can sign in using yubikey. Tailscale recommend doing this regardless.
9 replies
Migrate to another provider now if it’s a genuine concern. Migrate to OIDC if you have a server that you can make accessible publicly (though this creates the issue of why use tailscale if you’re opening your server to the web for this)
Alt: use headscale and stop relying on corpo bullshit. Then you can earn the ire of microsoft and still maintain remote access
WireGuard (that Tailscale is built on) is another alternative that doesn’t require a login. https://tailscale.com/compare/wireguard
This doesn't answer your question, but I created a completely new GitHub account and exclusively use it for logging into Tailscale.
Thanks for sharing. Iirc, having multiple accounts on GitHub itself is against their ToS. I fear it might increase the chance of getting banned for violating their TOS. Correct me if I’m wrong though.
Ah, ok. I didn't realize that. Great! This gives me a good reason to delete the other account and complete my migration to Codeberg! Thanks!
I have a personal and one account for my company.
Is that is against TOS then every dev I know is fucked, we all have a personal and work account. My work requires an account made with a work email to use fucking coopilot, and I need a personal account.
I think it’s fine to have multiple as long as they are paid accounts. But free only allows one.
https://www.reddit.com/r/github/s/16bWFqYxax
I had the same concern and posted on reddit about it long ago before deleting my reddit. Basically chose github at sign up as I didn't even know what OIDC was at the time. Then built a whole network around it with github as a single point of failure. There's no way to migrate it to another sign in method. Email sign up is not offered. The reasoning from Tailscale is that then they need to manage the whole extra user identification thing as well. Anyway this is old but the solution is either tear down the network and start again with OIDC (can use codeberg for that). Or if like me that means reconfiguring 40 docker containers and a whole network built around the magic dns there is another option. You need to login and add another user and give that user admin rights as well. I ended up adding that and then setting it up so they can sign in using yubikey. Tailscale recommend doing this regardless.