What’s the easiest way to get https while still using my given tailnet as domain for accessing stuff? The tailscale documentation suggest to download certs to the server and point each service to those certs, but that seems like more work than it should…?
Is a reverse proxy the best option? Or what do people who use tailscale as vpn for their devices use?
I need to point certain services out and accessible to family members, will do this through funnel feature in tailscale, but want https set up before pointing anything out.
Appriciate any suggestions ✨
It’s possible to host a dns server for your domain inside your tailnet, and offer dns responses like: yourwebserver.yourdomain.com = tailnetIP
Then using certbot let’s encrypt with DNS challenge and api for your public dns provider, you can get a trusted certificate and automatically bind it.
Your tailnet users if they use your internal dns server will resolve your hosted service on your private tailnet ip and the bound certificate name will match the host name and everyone is happy.
There’s more than one way though, but that’s how I’d do it. If you don’t own a domain then you’ll need to host your own private certificate authority and install the root authority certificate on each machine if you want them to trust the certificate chain.
If your family can click the “advanced >continue anyway” button then you don’t need to do anything but use a locally generated cert.
Yeah I do not have a domain. I did before but for some reason i struggled to wrap my head around reverse proxies and domains. And I prefer to not have to pay for yet another service as I’m just a student :P
You can get domains for a few dollars per year. Go to tld-list.com and sort by renewal price.
When I was in school, I used to pay for domains by doing online surveys that paid $1 per survey. Not sure if that’s still a thing these days.