Skip to content

Basic Tailscale Setup

These instructions will help you create a Tailnet and connect an Unraid server. Once finished, you should be able to connect to the following services via the Tailscale IP / MagicDNS name of the Unraid server:

  • WebGUI
  • File shares (SMB/NFS)
  • SSH
  • Bridge mode Docker containers (default or custom bridge networks)

Note

Docker containers running on ipvlan/macvlan networks (e.g., br0) cannot be accessed via the Tailscale IP for the Unraid server. To connect to these containers, you should either configure a subnet router or add Tailscale to the container.

Create a Tailnet

  1. Go to Tailscale and click the Get Started button.

    !get-started

  2. Select an identity provider and log in.

    !identity-provider

  3. Select either Business use or Personal use.

    !personal-use

  4. Follow the provided instructions to install Tailscale on a client device (phone/laptop/etc.).

    !first-device

  5. Once you have installed Tailscale on the device, it will appear on the screen.

    !second-device

Install the Unraid Tailscale Plugin

  1. Log in to the Unraid server and switch to the Apps tab.
  2. Search for Tailscale.

  3. Install Tailscale (Plugin).

    !install-plugin

  4. Click Done once the window shows that Tailscale has been installed.

    !install-complete

  5. Switch to the Settings tab, then click on Tailscale.

    !settings-menu.png

  6. Click Reauthenticate.

    !reauthenticate

  7. Click Connect.

    !connect-device

  8. After the connection is complete, the browser will redirect to the Tailscale admin console, which should show both devices are connected.

    !tailscale-console

Finish Tailscale Setup

  1. Open the Tailscale DNS Settings.

  2. (Optional) Click Rename tailnet... . This will allow you to select a more friendly .ts.net domain name for your devices.

    !rename-tailnet

  3. At the bottom of the DNS page, click Enable HTTPS. This will allow Tailscale to generate SSL certificates for your devices (e.g., to avoid certificate warnings when accessing the Unraid WebGUI.)

    Note

    Machine names are published in a public certificate ledger when HTTPS is enabled. The public ledger only provides information about the names of the TLS certificates; access to your devices is still restricted by Tailscale.

    For more information, see the Tailscale HTTPS documentation.

    !enable-https