{"id":124231,"date":"2026-04-25T14:56:10","date_gmt":"2026-04-25T14:56:10","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2026\/04\/25\/this-app-makes-remote-homelab-access-stupidly-simple-no-port-forwarding-required\/"},"modified":"2026-04-25T14:57:13","modified_gmt":"2026-04-25T14:57:13","slug":"this-app-makes-remote-homelab-access-stupidly-simple-no-port-forwarding-required","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2026\/04\/25\/this-app-makes-remote-homelab-access-stupidly-simple-no-port-forwarding-required\/","title":{"rendered":"This app makes remote homelab access stupidly simple\u2014no port forwarding required"},"content":{"rendered":"

<\/a>\n<\/p>\n

\n

If you arrange a service on your property server, you’ll be able to entry it immediately by simply typing the server’s IP tackle, adopted by the port that service is mapped to. As long as you are related to the identical community because the server, you’ll be able to entry that service.<\/p>\n

<\/p>\n

Nonetheless, once you’re outdoors, not related to your property Wi-Fi, you’ll be able to’t entry your property server or its providers immediately. The standard recommendation is to arrange port forwarding in your router or a reverse proxy. However these aren’t your solely choices. There is a actually easy solution to entry your property server and its providers outdoors the interior community.<\/p>\n

<\/p>\n

\n What’s Tailscale, and the way does it work
\n <\/h2>\n

\n It provides you a safe, personal community
\n <\/h3>\n

Today I’ve arrange a website title and I take advantage of the reverse proxy<\/a> Caddy to entry my providers on totally different subdomains by way of HTTPS. For instance, I have a self-hosted Vaultwarden server<\/a> accessible on a URL that appears one thing like this: https:\/\/vault.domainname.com. I can entry it on any community, anyplace on the planet, identical to a traditional web site. It does require a little bit of a setup and tinkering although.<\/p>\n

Tailscale lets you do something similar<\/a> with out the difficult configurations. You’ll be able to join Tailscale, then run it in your server and your shopper gadgets (your telephone, laptop computer, and different gadgets) and it will create a safe, personal community for you.<\/p>\n

The community known as a “tailnet.” Any gadgets related to the personal tailnet can talk with one another. Tailscale routinely assigns every machine in your tailnet an IP addssress, which solely licensed gadgets related to the identical community can entry. These gadgets might be related to Wi-Fi, LAN, or knowledge anyplace on the planet and nonetheless attain the tailnet IP addresses. No must mess with ports.<\/p>\n

\n
\n
\"Tailscale\n <\/picture>Credit score:\u00a0Tailscale<\/small><\/figure>\n<\/p><\/div>\n<\/p><\/div>\n

The most effective half is that you do not even want to recollect these IP addresses as a result of Tailscale supplies you with “magic DNS.” Principally, as an alternative of typing an IP tackle like http:\/\/100.x.x.x, you’ll be able to kind a simple to recollect title like https:\/\/dietpi.lemon-cow.ts.internet. Be aware that the instance magic DNS makes use of HTTPS, which some self-hosted providers require (like password managers). Often, it is a trouble to configure, however with Tailscale you simply should click on one button.<\/p>\n

Tailscale is the primary resolution I used, and it labored like magic for the longest time. The one motive I ditched it’s that I discovered it inconvenient to maintain and toggle the Tailscale app on my telephone.<\/p>\n

<\/p>\n

\n Establishing Tailscale
\n <\/h2>\n

\n It solely takes two instructions to get it up and operating
\n <\/h3>\n

To start out, you may need to set up Tailscale in your server. There’s an official script that automates that course of for you. Let’s run it.<\/p>\n

curl -fsSL https:\/\/tailscale.com\/set up.sh | sh<\/pre>\n
\n
\n
\n
It is all the time a good suggestion to examine scripts from the web earlier than operating them.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n
Then begin the Tailscale service.<\/p>\n
sudo tailscale up<\/pre>\n
\n
\n
\n
The script installs and runs Tailscale as a systemd service by default. In case your server is utilizing a distinct init system, you may should manually arrange a background service for it.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n
You may see a hyperlink printed on the console. Comply with that hyperlink to both enroll or signal into the Tailscale console. With that, your server must be licensed and related.<\/p>\n
The subsequent step is putting in Tailscale in your gadgets. For Linux machines, you should utilize the identical instructions to get the Tailscale service up and operating. On Home windows or macOS, you may get the correct installers from the Tailscale web site. For cell gadgets, you’ll be able to obtain the Tailscale app from the App Retailer or Play Retailer.<\/p>\n
You may need to log into the identical Tailscale account you used for the server and authorize your gadgets. Verify all gadgets at the moment in your tailnet with this command.<\/p>\n
tailscale standing<\/pre>\n
As I discussed, the straightforward solution to entry your server and its providers is thru the MagicDNS characteristic. Open the DNS tab on your Tailscale Console<\/a> and scroll down to seek out the MagicDNS and HTTPS Certificates buttons. Be sure that each are enabled.<\/p>\n
You may as well allow HTTPS Certificates to your tailnet by operating this command in your server. Substitute the tailnet tackle with your personal.<\/p>\n
sudo tailscale cert dietpi.lemon-cow.ts.internet<\/pre>\n
As soon as all of your servers and gadgets are on the identical tailnet, you’ll be able to entry operating providers from any of these gadgets, so long as Tailscale is operating on that machine. Let me present you the way to do this subsequent.<\/p>\n
    <\/p>\n
\n                        Accessing your self-hosted providers utilizing Tailscale
\n               <\/h2>\n
\n            Simply substitute the server IP with the Tailscale tackle
\n    <\/h3>\n
To illustrate you’ve a Docker container that you just need to entry outdoors your property community.<\/p>\n
Open the Tailscale console<\/a> once more and hop to the DNS tab. Be aware your distinctive tailnet title. It’d look one thing like lemon-cow.ts.internet. Then go to the Machines<\/strong> tab and search for the server title. You want each to entry your server on tailnet. For instance, mine is known as dietpi<\/code>. So the complete tackle pointing to the server will seem like this.<\/p>\n
http:\/\/dietpi.lemon-cow.ts.internet<\/pre>\n
To illustrate you’ve an Docker container lively on port 3001. On your property community, you’d sometimes kind the server IP tackle, adopted by :3001<\/code>. It’d look one thing like this.<\/p>\n
http:\/\/192.x.x.x:3001<\/pre>\n
Now that you’ve got arrange Tailscale with a novel MagicDNS, you’ll be able to simply substitute that server IP with the Tailscale tackle, hold the goal port, and it will work as in the event you have been on the native community.<\/p>\n
http:\/\/dietpi.lemon-cow.ts.internet:3001<\/pre>\n
\n
\n                                                                                            \"Accessing\n        <\/picture>\n<\/p><\/div>\n<\/p><\/div>\n
It will work simply the identical method for any mapped ports.<\/p>\n
\n
\n
\n
\n
                        <\/p>\n
\n
\n
\n                                                                                                                                                            \"raspberry\n        <\/picture>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n
\n
                    <\/p>\n
\n
\n
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/p>\n
\n\t\t\t\t\t\tModel<\/strong> \t\t\t\t\t<\/dt>\n
\n\t\t\t\t\t\t\t\t<\/p>\n
\t\t\t\t\t\t\t\t\t\t\tRaspberry Pi<\/p>\n
\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t<\/dd>\n<\/p>\n
\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/p>\n
\n\t\t\t\t\t\tStorage<\/strong> \t\t\t\t\t<\/dt>\n
\n\t\t\t\t\t\t\t\t<\/p>\n
\t\t\t\t\t\t\t\t\t\t\t8GB<\/p>\n
\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t<\/dd>\n<\/p>\n
\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/p>\n
\n\t\t\t\t\t\tCPU<\/strong> \t\t\t\t\t<\/dt>\n
\n\t\t\t\t\t\t\t\t<\/p>\n
\t\t\t\t\t\t\t\t\t\t\tCortex A7<\/p>\n
\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t<\/dd>\n<\/p>\n
\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/p>\n
\n\t\t\t\t\t\tReminiscence<\/strong> \t\t\t\t\t<\/dt>\n
\n\t\t\t\t\t\t\t\t<\/p>\n
\t\t\t\t\t\t\t\t\t\t\t8GB<\/p>\n
\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t<\/dd>\n<\/p>\n<\/dl><\/div>\n<\/p><\/div>\n
                    \n                <\/div>\n<\/p><\/div>\n
            <\/p>\n
            
\n             <\/p>\n
            <\/p>\n
            <\/p>\n
            <\/p><\/div>\n<\/p><\/div>\n\n
\n            Tailscale is a set-and-forget system
\n    <\/h3>\n
Tailscale makes it easy to entry your property lab and your self-hosted services<\/a> once you’re out and about. It is just about a set-and-forget system that simply works (largely.) Even the setup is straightforward sufficient.<\/p>\n<\/p><\/div>\n