| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596 |
- <!DOCTYPE html>
- <html lang="en" xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <title>Easily Connect to Your Home Lab From Anywhere with Tailscale in Docker</title>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
- <meta charset="UTF-8">
- <meta name="keywords" content="Home Lab,Home Lab Ideas,Docker Made Easy,Install Guide,Self-Hosted,Free Software,Self-Hosted VPN,VPN Server,Windows,Linux,VPN,VPN Solution,Virtual Private Network,Tailscale,Android,Docker,Home Networking,Network,Docker Simplified,Docker Made Simple,Self-Hosted VPN Server,VPN To Your Home Network,Docker How To,Docker Host,Containers,Containerization,Container,Free VPN,How To,Tutorial,i12bretro">
- <meta name="author" content="i12bretro">
- <meta name="description" content="Easily Connect to Your Home Lab From Anywhere with Tailscale in Docker">
- <meta name="viewport" content="width=device-width, initial-scale=1.0">
- <meta name="revised" content="12/01/2024 07:13:38 PM" />
- <link rel="icon" type="image/x-icon" href="includes/favicon.ico">
- <script type="text/javascript" src="https://code.jquery.com/jquery-3.5.1.min.js"></script>
- <script type="text/javascript" src="includes/js/steps.js"></script>
- <link href="css/steps.css" rel="stylesheet" type="text/css" />
- </head>
- <body>
- <div id="gridContainer">
- <div class="topMargin"></div>
- <div id="listName" class="topMargin">
- <h1>Easily Connect to Your Home Lab From Anywhere with Tailscale in Docker</h1>
- </div>
- <div></div>
- <div id="content">
- <h2>What is Tailscale?</h2>
- <blockquote><em>Tailscale is a VPN service that makes the devices and applications you own accessible anywhere in the world, securely and effortlessly. It enables encrypted point-to-point connections using the open source WireGuard protocol, which means only devices on your private network can communicate with each other. -<a href="https://tailscale.com/kb/1151/what-is-tailscale/" target="_blank">https://tailscale.com/kb/1151/what-is-tailscale/</a></em></blockquote>
- <h2>Creating a Tailscale Account</h2>
- <ol>
- <li>Open a web browser and navigate to <a href="https://login.tailscale.com/" style="font-size: inherit;" target="_blank">https://login.tailscale.com/</a></li>
- <li>Log in using one of the available single sign-on methods</li>
- <li>Select DNS from the top navigation menu</li>
- <li>Click the Add nameserver dropdown > Custom...</li>
- <li>Enter the IP address of the DNS server to use for your internal network/LAN > Click Save</li>
- <li>Select Settings from the top navigation menu</li>
- <li>Select Keys under the Personal Settings heading in the left navigation menu</li>
- <li>Click the Generate auth key... button</li>
- <li>Check the Reusable box > Generate key</li>
- <li>Copy/leave the generated key visible for use later</li>
- </ol>
- <h2>Installing Docker</h2>
- <ol>
- <li>Log into the Linux host and run the following commands in a terminal window
- <div class="codeBlock"># install prerequisites<br />
- sudo apt install apt-transport-https ca-certificates curl software-properties-common gnupg-agent -y<br />
- # add docker gpg key<br />
- curl -fsSL https://download.docker.com/linux/$(awk -F'=' '/^ID=/{ print $NF }' /etc/os-release)/gpg | sudo apt-key add -<br />
- # add docker software repository<br />
- sudo add-apt-repository "deb [arch=$(dpkg --print-architecture)] https://download.docker.com/linux/$(awk -F'=' '/^ID=/{ print $NF }' /etc/os-release) $(lsb_release -cs) stable"<br />
- # install docker<br />
- sudo apt install docker-ce docker-compose containerd.io -y<br />
- # enable and start docker service<br />
- sudo systemctl enable docker && sudo systemctl start docker<br />
- # add the current user to the docker group<br />
- sudo usermod -aG docker $USER<br />
- # reauthenticate for the new group membership to take effect<br />
- su - $USER</div>
- </li>
- </ol>
- <h2>Running the Tailscale Container</h2>
- <ol>
- <li>Continue with the following commands in a terminal window
- <div class="codeBlock"># create the tailscale container<br />
- # replace the TS_AUTHKEY variable<br />
- # and update the TS_ROUTES variable<br />
- # to point to your local network subnet<br />
- docker run -d --name=tailscale -v /var/lib:/var/lib -v /dev/net/tun:/dev/net/tun -e TS_ACCEPT_DNS=true --network=host --cap-add=NET_ADMIN --cap-add=NET_RAW --restart=unless-stopped --hostname="ctr-gateway" -e TS_AUTHKEY=<%AUTH KEY CREATED EARLIER%> -e TS_ROUTES=192.168.0.0/24 tailscale/tailscale</div>
- </li>
- <li>Back in the web browser, select Machines from the top navigation menu</li>
- <li>The ctr-gateway machine should be listed and connected</li>
- <li>Click the Settings button across from the ctr-gateway device > Select Disable key expiry</li>
- <li>Click the Settings button across from the ctr-gateway device again > Edit route settings...</li>
- <li>Click the Approve all button to enable routing into the local network</li>
- </ol>
- <h2>Connecting Other Devices</h2>
- <ol>
- <li>Additional devices can be added to the Tailscale network by installing the Tailscale client <a href="https://tailscale.com/download" target="_blank">Additional reading</a></li>
- <li>To connect from a mobile device, install the Tailscale mobile app</li>
- <li>Log into Tailscale using the same method used to create the account earlier</li>
- <li>Once connected to the network, the mobile device can be used to reach services in your home lab securely from anywhere</li>
- </ol>
- <p>Source: <span><span class="codeBlock"><a href="https://hub.docker.com/r/tailscale/tailscale" target="_blank">https://hub.docker.com/r/tailscale/tailscale</a><br />
- Documentation: <a href="https://tailscale.com/kb/" target="_blank">https://tailscale.com/kb/</a></span></span></p> </div>
- </div>
- </body>
- </html>
-
|
