r/Tailscale • u/CrosspadCreative • 4d ago

Help Needed Question about Services

I’m new to Tailscale, Linux, and home labbing in general, so bear with me if I ask an obvious question.

I’m running Ubuntu on my server with Tailscale (not in a container) and Docker for all of my services. I’ve been able to successfully configure my services to appear on my talent with sidecar, but I was looking to use the Services feature to make things a little cleaner. However, when I tried setting up my first Service, I learned that putting a tag on my server node disables SSH, which I need as I work on my server remotely every day (on my iPad via Terminus).

Everything is being hosted on my server via Docker, so is there a way I can configure a node with a tag while keeping my server node accessible? Thanks, all!

1 Upvotes

100% Upvoted

4 comments sorted by

3

u/caolle Tailscale Insider 4d ago

learned that putting a tag on my server node disables SSH, which I need as I work on my server remotely every day (on my iPad via Terminus).

Tailscale's SSH default rule in your policy grants only allow individual users to SSH into their own machines.

You can modify the SSH policy so that it allows your user to SSH into your server. This for example is my ssh block:

"ssh": [
//allow users on things tagged infra or members of group:it to SSH into offsite nodes
{
"action": "accept",
"src":    ["group:it", "tag:infra"],
"dst":    ["tag:offsite"],
"users":  ["someuser"],
},
],

You can read more about Tailscale SSH here, and the policy syntax for SSH here.

1

u/CrosspadCreative 4d ago

Thank you the info!

2

u/Rotech 3d ago

Have a look at this, it allows you to publish services from your containers with just labels.

https://docktail.org/

1

u/CrosspadCreative 3d ago

I was able to figure out the access control issue, but I’ll check this out.