Tailscale questions
reddit / selfhosted

----------------------------------------------------------------------
JohnnyRingo84 · 2023-12-15 19:01

I'm pretty new to self hosting things, and really just Jellyfin so
far. I want to use Tailscale to allow my brother access to my Jellyfin
server, but I have some questions about that and the security behind
it. I was able to get a subnet set up and active with what is maybe
too large of an IP range. I'll be honest I don't understand that part
of it very well. I would really only like to expose my particular
Jellyfin address to Tailscale, 192.168.*.*: Port, so how do I go about
doing that in Windows? Is it possible? I'm just using Windows right
now because I'm lazy, and I'm planning a new build that will use
Linux/Unraid/whatever later. Also, just so I understand, opening up
the subnet this way still only gives Tailscale access to my network,
correct? Only approved devices will be able to access my network? I
just want to make sure I didn't make any mistakes.

----------------------------------------------------------------------
thekrautboy · 2023-12-15 20:47

Fyi /r/Tailscale exists.

> I would really only like to expose my particular Jellyfin address to
Tailscale, 192.168..: Port, so how do I go about doing that in
Windows? Is it possible?

You can configure specific access rules in the Tailscale controlpanel.

> Only approved devices will be able to access my network?

If you set up the Tailscale options like that then yes, you will get a
email if someone wants to join your TS network and you need to approve
them first. Without that, they cannot connect.

----------------------------------------------------------------------
momsi91 · 2023-12-15 21:11

> subnet set up and active with what is maybe too large of an IP
range.

Did not try until now, but you should be able to just advertise
192.168.x.y/32, which would essentially be only that ip.

>opening up the subnet this way still only gives Tailscale access to
my network, correct?

Yes. If you have node A node B and node C in your tailnet, and node C
is a server on your home, that advertises the route 192.168.1.0/24
(your home subnet), than node A and B can access the home subnet also
over Tailscale, wherever they are.

----------------------------------------------------------------------
JohnnyRingo84 · 2023-12-15 21:18

Thank you.

----------------------------------------------------------------------
JohnnyRingo84 · 2023-12-15 21:19

Thank you.

----------------------------------------------------------------------
thekrautboy · 2023-12-15 21:20

No problem :)

----------------------------------------------------------------------
StruggleElegant3855 · 2023-12-15 21:41

I'm bored Wyd

----------------------------------------------------------------------
TBT_TBT · 2023-12-16 11:00

If you want to share out only your server, tell him to get Tailscale
and only share that server with him (with the „Share…“ button in the
admin interface. No need to expose the whole network.