I’ve not done much with external access in the past, but I’m playing with Tailscale and it’s pretty neat. Wondering if I can configure it to work like my local access does:

  1. I use Nginx Proxy Manager to set easy subdomains for my services, I.e. service.mydomain.com
  2. I use AdGuard Home and have a redirect for *.mydomain to that NPM
  3. This works great internally, which is all I’ve really used it for.
  4. I’ve got tailscale working and I can go externally to server.wackyname.ts.net:serviceport.
  5. what I’d like to do is have tailscale somehow use the same internal dns/npm info so when I’m on my tailnet service.mydomain.com still works.
  6. But no other external access, said subdomains do nothing off tailnet.
  7. Mydomain.com is an actual domain I own. General DNS is at Cloudflare right now (main domain was pointed at a hosted site previously, but that’s not needed anymore)

Any way to pull this off without a ton of complexity?

  • MacManDeluxe@infosec.pubEnglish
    5·
    1 day ago

    Tailscale has a NextDNS integration, so I use that to point my made-up internal domain to the Tailscale ip of my NAS. Works well with subdomains. When I’m on my local network (and not connected to Tailscale), my pihole directs the same url to the local ip.

    To clarify, when you’re external or on the tailnet, you want the Tailscale ip. On the local network, you want the local ip.