How to integrate Tailscale with self-hosted Zitadal
reddit / selfhosted

----------------------------------------------------------------------
Eisai_Kurosawa · 2023-12-14 10:32

By doing this, You can use the official Tailscale VPN infrastructure
and clients without creating an account on
[tailscale.com](https://tailscale.com)

​

Disclaimer: I'm not a Pro for OIDC or Oauth, this guide worked for me,
but probably has a lot of space for improvement, and you are welcome
to give suggestions.

​

let's assume some basic information

You have a web server running at:

[example.com](https://example.com)

Your Zitadal running at:

[login.example.com](https://login.example.com)

Your admin account on Zitadal:

[admin@example.com](mailto:admin@example.com)

​

Then, Create webfinger file point to your Zitadal server

1. Go to the root directory of your web server and create following
folders\[your\_wwwroot\]\\.well-known\\webfinger

2. create webfinger.jsonjrd under webfinger folder

3. edit webfinger.jsonjrd, assuming you want to add an account for
yourself and an account for your friends.

















(You have to put every account that will use VPN in this file)

4. set the default document for this folder to webfinger.jsonjrd

5. **IMPORTANT** Set MIME for this folder. define ".jsonjrd" as
"application/jrd+json", if you don't do this, Tailscale will reject
your webfinger file.

You can easily find guides on Google for steps 4 and 5. Here is my
web.config file for IIS