[Question] Hosting services on Tailnet without Tailscale Serve (lemmy.ml)

submitted 3 months ago by Quail4789@lemmy.ml to c/selfhost@lemmy.ml

3 comments fedilink hide all child comments

I am on a shared network. I'd like to self host services and access them from all my devices but I do not want these exposed to other people in my network. I've noticed that I can just change the port mapping in Docker to <Tailscale IP>:<port>:<port> from <port>:<port> and it just works. Works as in the service is accessible from my Tailnet, inaccessible from the local network or the internet. Is it really this easy or am I missing something? Just sounds too good to be true so I am suspicious it might somehow be insecure.

all 4 comments

sorted by: hot top controversial new old

[-] Shadow@lemmy.ca 9 points 3 months ago

That's correct. You're telling docker to bind to that specific network interface. The default is 0.0.0.0 which listens on all interfaces.

[-] Quail4789@lemmy.ml 1 points 3 months ago

And it is safe to host HTTP services this way, say something like Immich or NextCloud?

[-] Shadow@lemmy.ca 3 points 3 months ago

Yes

this post was submitted on 16 Sep 2024

13 points (100.0% liked)

Self Hosted - Self-hosting your services.

11639 readers

3 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules

No harassment
crossposts from c/Open Source & c/docker & related may be allowed, depending on context
Video Promoting is allowed if is within the topic.
No spamming.
Stay friendly.
Follow the lemmy.ml instance rules.
Tag your post. (Read under)

Important

Beginning of January 1st 2024 this rule WILL be enforced. Posts that are not tagged will be warned and if not fixed within 24h then removed!

Lemmy doesn't have tags yet, so mark it with [Question], [Help], [Project], [Other], [Promoting] or other you may think is appropriate.

Cross-posting

!everything_git@lemmy.ml is allowed!
!docker@lemmy.ml is allowed!
!portainer@lemmy.ml is allowed!
!fediverse@lemmy.ml is allowed if topic has to do with selfhosting.
!selfhosted@lemmy.ml is allowed!

If you see a rule-breaker please DM the mods!

founded 3 years ago

MODERATORS

dogmuffins@lemmy.ml

Zoe8338@lemmy.ml

testman@lemmy.ml