“I am trying to access it remotly via my tailscale funnel link example-text.ts.net. I set up the proxy using powershell. It was working a month ago but now it is not. I will review the above and recheck when I get home.”
“You can create self-signed certificates or even publicly signed ones you only use on internal domains. Tailscale doesn't prevent you from doing that.”
“An attacker would need to get inside your tailnet to do anything so if you have tailnet approvals enabled (it’s on by default) then a Tailscale admin has to approve any device before they’re allowed to talk to stuff inside.”
“You can use a reverse proxy like nginxui in host network mode in docker and also install Tailscale on the os running that. You can then front door traffic from outside and route it across the tunnel to other devices running Tailscale.”
“It's not the same as Tor, but you can subscribe to Mullvad VPN through Tailscale and use it as an exit node, that will allow you to use Tailscale and a VPN at the same time.”
“But I think a tailscale offering could be very convenient.I am guessing cloud flare should have building blocks of their own, but it's a different layer than tailscale's.”
“Agent to agent communication across remote machines is definitely lubricated with tailscale, I’m not sure what value moving up the stack would bring at this stage?”
“Tailscale can cover most of the upfront headaches but I think you'll probably prefer to have set things up from the start with a reverse proxy and your own DNS in the future. It's the core of a ton of convenience/ergonomics, branding, security/access control, logging/observability, etc and the key to a ton useful implementation patterns.”
“Claude seems to be able to not only deterministically build control levers for Tailscale into my app but adjust it on its own through the CLI already. What does the MCP add?”
“Having a tailscale interface has messed up every pfsense I've seen it on when a reboot happens. Fails to load properly on boot up and you have to restore.”
“Setting up a domain that points at the tailscale network ip address and then using let's encrypt (or any other provider) + dns challenge will likely help that if it's the case without exposing it beyond the tailscale network.”
“this is likely a WebSocket issue the browser extension needs a direct websocket connection to vaultwarden to sync in real time but your reverse proxy or tailscale setup might be blocking it”
“But every time i have the same problem: when trying to log into a website, Bitwarden, the browser module, cannot retrieve information i think. And just doesn't work.”
“But I let Astra log into my Tailscale config and fix it for me. It did split DNS with a local/remote lookup, configured everything, and so on. In about 12 seconds.”
“I have all my IPs below my Netgate LAN interface advertised on Tailscale. I can reach all my local subnets fine from all my other tailscale machines, but I cannot reach any of my tailscale machines from my local subnets.”
“I have found if you turn on Secure DNS with any provider other than automatic, when tailscale connects it prevents you from using tail dns, and tailscale prevents local dns. Under network setting it will say have an error next to Secure DNS and you will have an !”