-
Notifications
You must be signed in to change notification settings - Fork 1
tailscale
Tailscale creates a private VPN (tailnet) between your devices, letting you securely access all your services from anywhere — no port forwarding or exposing anything to the public internet.
-
Create a Tailscale account at tailscale.com (free for personal use, up to 100 devices).
-
Install Tailscale on your client devices (phone, laptop, etc.) from tailscale.com/download.
-
Generate an auth key at Admin Console > Settings > Keys. Use a reusable key so the container can re-authenticate after restarts.
-
Add the key to your
.env:
TS_AUTHKEY=tskey-auth-your-key-here
TS_HOSTNAME=media-server- Start (or restart) the stack:
docker compose up -d- Approve the node in the Tailscale Admin Console if prompted.
Once Tailscale is running on both your server and your client device, access services using your Tailscale hostname:
| Service | Remote URL |
|---|---|
| Seerr | http://media-server:5055 |
| Sonarr | http://media-server:8989 |
| Radarr | http://media-server:7878 |
| SABnzbd | http://media-server:8080 |
| Bazarr | http://media-server:6767 |
| Prowlarr | http://media-server:9696 |
| Homepage | http://media-server:3000 |
| LazyLibrarian | http://media-server:5299 |
| Audiobookshelf | http://media-server:13378 |
Replace media-server with whatever you set TS_HOSTNAME to. You can also use the Tailscale IP shown in the admin console.
Tailscale can provision automatic HTTPS certificates for your tailnet:
- Enable HTTPS in Admin Console > DNS.
- Access services at
https://media-server.your-tailnet.ts.net:<port>.
With MagicDNS enabled (on by default), you can use short hostnames like media-server instead of full IPs across your tailnet.