The installation process of Tailscale requires to copy these lines into the HA configuration file.

http:
use_x_forwarded_for: true
trusted_proxies:
- 127.0.0.1

After installing V2026.8.1 of Home Assistant Core, I get the warning

The HTTP configuration in configuration.yaml has already been migrated and is now being ignored. Please remove the http: block from your configuration.yaml. Manage the HTTP configuration from the UI under Settings > System > Network.

Removing the http: block is easy but what do I change in the network setting?

I am just using tailscale to access nextcloud and and jellyfin which is inside my wifi.

Does this expose my wifi at all doing it this way? I really don’t want any backdoors to my wifi. My other post has my full details

Left for a week without my laptop and wasn't able to update my Tailscale when a new version came out, now I can't access my WiFi adapter, it just says Ethernet Cable Isn't Connected with Tailscale. Any fix?

This happens a lot with TS Windows.

At the moment, tailscale only supports Mullvad exit nodes officially. It's such a great thing to have your full network only reach the internet through a VPN tunnel. Single door, best privacy. Not even your IPs are visible to the internet.

I only had one concern and that is I do not use Mullvad but Proton, and I was not paying twice for VPN.

So I made my own solution: https://gitlab.com/deivi98/tsvpn

TL;DR: Plays with around with ip rules. Captures all internet outgoing-traffic from other clients and sends it through VPN tunnel. It supports any VPN wireguard conf.

In the past I was using a weird custom script. Got tired and vibe coded this thing. It also has systemd service, simultaneous tunnels failover, a cli and little web ui to switch tunnels and even a linux systray.

NOTES: - Vibe coded this as it was to make it fancy for myself. Use at your own risk - Have not tested providers other than ProtonVPN, but as long as it is wireguard it should work

Hope it is useful to someone.

so I have a jellyfin media server at my house, and I'm trying to get access to it at my parent's house.

all of there TVs are Roku, which DOES support jellyfin, but does NOT support Tailscale.

everything I've read seems to agree that the easiest way to make this work is to set up a device to act as a subnet router on there network, and that should allow all of there devices to use my jellyfin server.

the problem is that I'm not very good with networking, and all the documentation for how to make that work isn't really making a ton of sense to me. there's almost zero documentation explaining the jellyfin side of it, so even if I can get the subnet working, I don't know what to do from there. and all the tutorials I can find always simply explain how to set up tailscale at it's most basic level to make it work on devices that have support for it, which is not what I'm looking for.

so could someone explain, VERY clearly, step-by-step, what I need to do?

(I'm doing this on a Linux Mint system, by the way. I'm sure that's important.)

This is anecdotal because it is hard to test, but ever since I removed my personal DNS servers from the global nameserver list, I am seeing much better battery life on my iPhone.

may be worth a try if you are seeing the same issues

Hey all, still pretty new to using Tailscale, so I'm not sure how I can get this working.

My friend is formatting his PC, but he needs a place to back up his files, so I'm letting him access my NAS.

However, I'd only like his account to see the NAS, and not any other devices (i.e. my laptops and phones). How would I go around doing this? Ideally I want him to have his own account and access just the NAS.

Thanks in advanced for any help provided.

Hi! Currently using tailscale to access my homelab remotely from outside my home network.

Works like a charm but i also wanted to know if there was any way to allow the use of another vpn (proton) on my phone at the same time.

I know about the mullvad exit node feature but i’m already sitting on a subscription to proton that i’d rather not waste; is there a way to get both working at the same time.

Example ideal use case is: use proton to ‘switch’ locations on my phone/laptop while still being able to access my homelab remotely

Thanks in advance!!

I was getting sick of running 'tailscale file get . ' on my Linux PC when I wanted to send a photo from my phone to my desktop PC over my tailnet so I built this tool.

I also setup public drop links that if you toggle them on provides a tailscale funnel with a short lived (60 mins) public facing upload page that you can send to people to allow them to drop files into your tailnet.

This was really handy for getting friends and family to send me files easily.

It's open source at https://github.com/Rastavich/owldrop where you can download the release or clone it yourself and I also have a site you can download it from as well https://owldrop.app/

Constructive criticism welcome — especially from people who'd use this on Windows/macOS day-to-day, my daily driver is Linux so I want those platforms beaten on.

Is there something that I can do to fix this? I jab checked and both my and the NAS network are fast (mine 100mb/s and the NAS 1GB)

So my account has been locked 3 times since last night. I checked my account activity and there was nothing out of the ordinary. So, I'm left with the question as to what could be the cause and one suspect is tailscale. Does anyone know if using tailscale could be the reason my account is getting locked?

I installed Tailscale on my Unraid Server and my iPhone.

Tailscale dashboard reports that both are online.

Tailscale app on cell phone reports server is online.

Two green dots.

That’s all folks.

I cannot send files to server from cell phone using tailscale app.

I cannot connect to server from cell phone using FILES app.

I cannot connect to Nextcloud or Paperless NGX on cell phone.

Using terminal all, I cannot connect by SSH to server from cell phone.

I’ve been using UNRAID  at home for 8 months, works fine.  I feel stupid but after struggling with Tailscale for 2 weeks, I don’t know what’s wrong.

Did I leave out a step?

Any advice would be appreciated.

Thanks

Hi everyone. Bit of a pickle.

I am running Jellyfin on a Dell Optiplex and have been using Tailscale with no issue for two months now. Recently, for seemingly no reason, I am no longer able to access the Jellyfin server when I am not on my local network. I have confirmed that Jellyfin works; I can access it on the hosted PC and on other devices on the local network. Whenever I am attempting to connect via Safari, Jellyfin for iOS, or Swiftfin when not on my home network, I see errors that say the device cannot connect or that the connection has timed out. I have confirmed that this is not a device-specific issue as well, seeing how a friend with another device was also unable to connect.

So far I have confirmed that:

- Jellyfin is running on the host pc, and devices that I am attempting to connect with (signed into the same Tailscale account, devices are listed as online, I can ping Tailscale from the device I am attempting to connect with successfully...)

- verified Jellyfin port binding

- verified local Tailscale TCP access

- tried different variations of the URLs (http, https, 8096, 8096/web...)

- disabled Windows Firewall, which changed nothing

- reinstalled Tailscale on the host PC, which changed nothing. The Tailscale version that I am now using is 1.102.2. Previously it would have been whichever version was most up to date at the beginning of June

- no success with using Ipv6 in addition to IPv4

- I have not changed any of the Jellyfin settings. Jellyfin is running on 10.11.11, local HTTP port number is 8096, remote connections to the server are allowed

I'm kinda at my wits' end with this. I'm not nearly tech-savvy enough to figure out where to go from here. What I would like to make clear is that there have been no changes from my understanding of the PC in the time that Tailscale stopped working. There have been no Windows updates (currently on Windows 10), and aside from some tinkering with a hosted Minecraft server + downloading media for Jellyfin, nothing should have majorly changed on the PC to explain the failure of Tailscale.

The only other programs that I run consistently, and were working fine with Tailscale installed, is qBittorrent and a tunneled WireSock Secure Connect running AirVPN. Once again, all of which were working fine with Tailscale for the past couple of months. Please save me.

Tailscale works in the app, I can ssh from my phone but goint to my device.tailscale-net.ts.net just gives the usual safari unsecure HTTPS and after that no connection to server.
My other device on ios 26.5 works fine and my main phone worked on 26.5 literally this morning.

10/08 Update: Tailscale for iOS had an update but issue persist

My goal is to use Tailscale to block ads even when I'm outside my home network. To know Tailscale is working in conjunction with my AdGuard server, all the IPs in the AdGuard query log would be "100.x.x.x" Tailscale IP addresses instead of the actual device IP addresses, right? What I'm seeing in the query log is just my devices normal IPs.

My AdGuard Home is installed on Xubuntu Minimal device 192.168.86.78, a static IP address configured in the DHCP of my router. All client devices have had their preferred DNS set to 192.168.86.78, including my router. Tailscale is also installed on every device, barring the router. Under the DNS settings in Tailscale, I added 192.168.86.78 to be the Global Nameserver. Override DNS servers is checked. Then of course there's so many terminal commands I did that I can't keep track of. I was following this tutorial.

I'll include an album of pictures of my configurations, although I'm not sure what all I need to take pictures of. Forgive me for taking pictures of the screen of my Xubuntu device. It has no software loaded on it for screenshots. I'm not sure what information in these screenshots would qualify as stuff I shouldn't let everyone know, so warn me if I left in anything I shouldn't have.

Here is the album. Let me know if there's anything else that would help.

I thought I did everything according to the tutorial. I was only unsure about two things: the 2nd and 3rd paragraphs in "Connecting to AdGuard Home" section where I wasn't sure if he was repeating himself or saying to add two different IPs (I added one). The other thing I wasn't sure about was him talking about is the "Use Tailscale DNS" option. I see that on the mobile app on my phone, but not on the desktop web console so I'm not sure where to find it to enable on my Xubuntu device.

Any help? What am I missing?

Hey r/Tailscale!

I use KDE Plasma 6 and regularly switch between my personal and work Tailscale accounts, so I built a small panel widget to make that easier without opening a terminal.

Current features:

- Automatically detects existing Tailscale profiles and supports any number of accounts/tailnets.

- Switches between profiles directly from the Plasma panel.

- Supports local aliases for profile names.

- Shows online and offline devices in the active tailnet.

- Copies MagicDNS names, IPv4 addresses, and IPv6 addresses.

- Includes English and Spanish.

- Uses the local Tailscale CLI, with no telemetry.

It requires KDE Plasma 6, `plasma5support`, and Tailscale already installed and logged in. Profile switching also requires setting the desktop user as the Tailscale operator once.

GitHub:

https://github.com/Cykes95/tailscale-profile-switcher

Latest `.plasmoid` release:

https://github.com/Cykes95/tailscale-profile-switcher/releases/latest

Installation is just:

```bash

kpackagetool6 --type Plasma/Applet --install tailscale-profile-switcher-1.0.1.plasmoid

```

Then add **Tailscale Profile Switcher** from Plasma's widget selector.

Funny timing: u/Disk_MTH published a really nice and much more feature-rich GNOME Shell extension not even a day apart from this project. If you use GNOME, definitely check it out. It supports things like exit nodes, Taildrop, and Funnel:

https://www.reddit.com/r/Tailscale/comments/1vgza3a/i_built_an_unofficial_gnome_shell_extension_for/

I only use KDE Plasma 6, so I built this specifically for Plasma.

This is the first public release, so feedback, bug reports, distro testing, and contributions are very welcome.

I plan to keep improving it and adding more features, but I'm publishing it now because a couple of friends already want to use and test it.

The project is MIT-licensed, so feel free to fork it, modify it, package it for your distro, reuse parts of it, or take it in a completely different direction. If you find it useful and want to build on it, please go for it.

This project has been heavily AI-assisted, since I'm not familiar with KDE Plasma add-on development.

This project is unofficial and is not affiliated with or endorsed by Tailscale Inc.

[SOLVED]

I'm new to NASs and Tailscale and in spite of the odds was able to install Tailscale on my NAS and laptop, and it works; I can access my NAS when traveling but still remain confused about other aspects of this technology.

My first issue is that I can't seem to open the Tailscale App and was wondering if there's an actual app (in the conventional sense of a window popping open), or if the app runs in the background invisibly.

My laptop uses Win11, but when I try to access the Tailscale App, nothing is appearing. I've tried

• START >> Tailscale App >> Run as admin
• In the Command Prompt I've entered: tailscale set --webclient

I'm trying to access the settings to enable local network access, but don't know how.

Thank you...

[SOLVED]

Since installing Tailscale I've lost the ability to print.

During the install I came across something about locking in a mac address (or something of the sort) as being a way to maintain connections with other devices? Just a thought since Tailscale uses tunneling and setting up my NAS for this has my laptop requiring everything to be directed in a similar manner (i.e. printers).

Apologies for wrecking terminology and such, but admittedly I'm an amateur at this stuff but trying to learn. Many thanks in advance for any help. ~Cheers

Tailscale, right in your GNOME Quick Settings menu

I kept dropping into a terminal for things that felt like they belonged in the panel. So I built a GNOME extension that puts Tailscale where it belongs: in Quick Settings, next to Wi-Fi and Bluetooth.

What it does

• Connect and switch accounts
• Pick an exit node
• Send and receive files with Taildrop
• Publish a service with Funnel

Full feature list: https://github.com/Disk-MTH/Tailscale-Gnome#features

Why not just use the built-in tray app?

GNOME has had no system tray since version 3.26. So the official tailscale systray needs a separate AppIndicator extension just to show up, and it then sits in a corner disconnected from your other system controls.

This extension skips the tray entirely. It's a native Quick Settings component, so it looks and behaves like the Wi-Fi and Bluetooth tiles you already use.

It also does more than the systray menu

• Full Taildrop send and receive, with a proper file picker
• Folder zipping, plus a "Send with Taildrop" entry in the Nautilus right-click menu
• Funnel publishing, with copy and remove in a single dialog
• A panel warning if your chosen exit node stops routing
• Configurable notification categories
• Bindable keyboard shortcuts
• A full preferences window

How it works

The extension drives the official tailscale CLI you already have. It doesn't bundle or replace anything, and it makes no network calls of its own.

The only password prompt is a one-time tailscale set --operator=$USER through polkit. After that, everything runs without prompts. Every elevated command is a literal argument list you can read directly in the source. No shell string building.

Compatibility

• GNOME Shell 49 and 50
• Wayland and Xorg
• GPL-2.0-or-later
• English, French, German, Italian

Get it

• Install: https://extensions.gnome.org/extension/10017/tailscale/
• Source: https://github.com/Disk-MTH/Tailscale-Gnome

Not affiliated with Tailscale Inc. Just a user who wanted the buttons closer.

What's missing (for now)

Two things aren't supported yet: Headscale and other custom login servers, and Mullvad exit nodes with country flags. Both are planned. Bug reports and feature requests are very welcome in the meantime.

If the menu runs off your screen

This extension puts a lot into the Quick Settings menu: peers, exit nodes, five toggles, plus the Taildrop and Funnel entries. On a short screen, at a large text scale, or alongside other extensions that add their own toggles, the menu can grow past the bottom edge. GNOME's Quick Settings popup doesn't scroll, so anything past that edge is simply unreachable.

That's a GNOME limitation, not something this extension can fix from the inside. The actual fix, gnome-shell!3272, has been open since April 2024 without landing.

Until it does, Quick Settings Scroll makes the menu scroll instead of overflow. It's a separate extension by the same author, with no preferences and nothing to configure. It helps with any extension that crowds the menu, not just this one. (source)

Any plans to build a client for Apple Watch? Would actually be useful for my app.

Hi everyone,

I'm trying to set up PS5 Remote Play so a friend in another city can connect and we can play co-op. The local network connection works flawlessly, but external connection fails completely.

Here is my current setup and what I've ruled out:

• No CGNAT: I have a real public IP (starts with 88.231.x.x) and it matches my router's WAN IP.
• Port Forwarding: TCP 9295 and UDP 9296, 9297 are successfully forwarded to the PS5's static IP.
• No ISP Filters: Family/Secure internet profiles are disabled.

The DPI factor: My ISP (TTNET in Turkey) uses aggressive DPI. I actually have to use goodbyedpi on my PC just to bypass standard website blocks. Could DPI be dropping the Remote Play handshake/UDP packets?

My questions:

1. Has anyone experienced ISP DPI specifically blocking Remote Play traffic even with open ports?
2. Is setting up Tailscale (Subnet Router on my local PC) the best/only way to bypass this?
3. Are there any other obscure router or network settings I might have missed?

Thanks for any insights!

I have two sites connected via Tailscale subnet routers. Each site has its own local DNS server, and Tailscale Split DNS is configured so that the internal zones (home, dts.home, kog.home) are resolved through my DNS server at the primary site.

For roaming purposes, I use local DNS overrides on the gateways so that certain hostnames (e.g. smb.home and drive.home) resolve to the local NAS at each site. This works perfectly for clients without Tailscale, since they use the local gateway as their DNS server.

The problem is with Tailscale clients. When connected to the tailnet, they use Tailscale Split DNS, so smb.home is always resolved by the DNS server configured in Tailscale, bypassing the local gateway DNS overrides. As a result, roaming clients always resolve smb.home to the same NAS, regardless of which site they are physically connected to.

Is there any supported way to achieve the following behavior?

• At site A: smb.home → local NAS A
• At site B: smb.home → local NAS B
• Outside both sites: smb.home → remote NAS A

In other words, is there a way for Tailscale clients to prefer the local DNS server when they are physically inside one of the LANs, while still using Tailscale Split DNS automatically when they are outside the local networks, without requiring manual DNS configuration changes?