Master Tailscale on Unraid Pt 1: Easy Setup, Subnet Routing & Secure Sharing

[@EDACerton]

Thanks for doing a video that covers the plugin installation! The Tailscale DNS setting is generally not needed on Unraid installs, and can cause unexpected behavior in some cases since the DNS implementation on Unraid is very simple (resolv.conf only). I generally recommend that folks leave that setting off unless there's a specific need for it -- that's why I have it hidden in the basic settings. You can still access Unraid via MagicDNS with the setting turned off. The reason that changing that setting fixed the WebGUI was because Tailscale restarts when settings are changed. You can accomplish the same result by using the Restart button in the Tailscale settings. (I have an improvement coming in the next update that will hopefully eliminate this restart, it only affects the initial login to Tailscale but is still annoying.) Also, on an unrelated note, you don't have to use the CLI to advertise routes... if you click the "Viewing" button in the top right of the "Tailscale" page, it'll let you switch to an edit mode and add routes via the web interface.

[@S_Bat]

Thank you for the great info! Looking into MagicDNS now :)

[@sandman7793]

@@pascalcollet3897 edacerton is not the one who created this video. Not the same person.

[@EDACerton]

@@sandman7793 Correct, but I do appear in the video :)

[@sandman7793]

@@EDACerton didn't realize.

[@tensaikokujin]

When I try this I get "Cannot access this device’s Tailscale IP. Make sure you are connected to your tailnet, and that your policy file allows access." Do we need to change something in the policy file or the plugin settings?

[@joelfrojmowicz]

Hi Ed, once again, another great video! Can I just ask you for your next videos to lower the volume of the background music? It's hard to understand for non native english speakers with this music on the background...

[@Moose1207]

I am a born and raised English speaker with good hearing, and I had difficulty hearing him sometimes. The background music is indeed a little too loud and annoying.

[@RichardErkens]

Thanks! For all the videos about unraid. Because of you I bought unraid instead of go the Truenas road

[@ruimoura]

sane here, this guy is a legend

[@SpaceinvaderOne]

Your very welcome Richard. Thanks so much for the superthanks. I am so glad you find the videos useful :)

[@koopa2k]

of course you could always deploy truenas as a VM within Unraid and get the best of both worlds - depending on your requirements of course.

[@MegaBlindy]

I've been using tailscale for ages and this video just made me realise... Why I don't advertise my whole subnet instead of just my unraid server, it makes my life so much easier

[@SuperDerek]

what a great coincidence! I had just finished installing the docker version of Tailscale... just switched to the plugin because of this video, and did it in 30 minutes. Thanks!

[@js889]

Thank you so much for the video. Looked so long for a solution to not use the tailscale ip with port anymore. Didnt knew their was a plugin.

[@fredamn76]

Looking forward to the next video about Tailscale🎉

[@jaykay5369]

Just joined you on Patreon - absolutely love your guides. You are the sole driving force behind me setting up 2 Unraid servers over the past couple of years. Without you, I would not only be lost, but likely not even have a working Unraid setup. Very much looking forward to Part 2, as I use Swag, after following your Nextcloud guide.

[@reallyshortfacedbear]

Man this video is coming at a perfect time! I have been using tailscale for over a month, and love how easy it was to setup. I am using it to remotely access my unraid server everyday from a different country with no hiccups. I just wanted to start learning about the more advanced features of tailscale, like subnet routing, sharing devices and SSH via tailscale. Excited for part 2!

[@cam_934]

I believe Tailscale is now also an app for Apple 4K TV so you should be able to give the apple media player client remote access to your unraid media server.

[@Elmojomo]

Oh man, I can't wait for part 3!! I'm currently stuck in CGNAT limbo with T-Mobile business internet. I've been absolutely pulling my hair out, trying to get it working properly with my hosted services. Part 1 already helped a little, but since I had the tailscale plugin already, it was mostly tweaking. I'm going to watch Part 2 now, and will be eagerly waiting for Part 3. :D

[@jasonpluis3493]

YES! The advice on advertising subnets is greatly appreciated.

[@glepa]

btw, these videos works best without background music :-)

[@kimmerrild3487]

I always enjoy your videos Ed, but this is one of the better ones, and super help full. Its an awesome way to invite people into your system if you need help, or just wanna share with friends and family. I use the build in wireguard, and use it daily, but this is more versatile. I also do agree that reverse proxying and opening up the entire system to the wider internet is a bad thing, (If you don't haft to) and we should all try and keep things as tight as possible.

[@rallygallery]

Hi Ed. Excellent as ever. Have been using Tailscale for a while but as ever you plugged in the gaps! The first one on using the plugin and not container. Great advice and have switched over. Looking forward to the rest of the series. Keep up the superb work!

[@flipsyde224]

I was using Tailscale before but didn't know about the subnet routing stuff. Super helpful - thank you!

[@zippi777]

As always GREAT JOB MAN! I love your usefull videos!

[@markshaz8691]

I didn't learn anything in this video, but I have in so many of your other videos, thanks for doing these.

[@jgz2]

Thanks Ed. Brilliant. I was using the container method. Deleted that and replaced with the plugin. Looking forward to the next in the series.

[@tvd1188]

Haven't watched this all yet, but i just did a tailscale on my unraid server, but i didnt use docker, but plugins instead. working great so far.

[@gerestragui]

11:38 plugin intalled

[@aerobrain2001]

I've been using Tailscale for a while and love it. But I had no idea how to do the IP advertising. That will be awesome for remote access!! Thank you!

[@Moose1207]

Thank you for this! I was using Tailscale when it first showed up as a docker container, there was no plugin at that time (unless I missed it somehow lol) This works loads better than the container version.

[@splatman2]

Thank you so much for this video. Talk about simplicity and the ability to get into your server when you're outside of your network spaceinvader one. Thank you for making this video. I did notice though I ran into an issue. Plex was kicking out, secure connection and was no longer available after a short period of time after installing this plug-in. On Unraid 6.12.9 I found the problem to be I needed to update the unraid server software to 6.12.13 And that cleared up the problem been stable for several days now, but it was causing indirect connections outside of the home before updating. I hope this helps. Anyone else with the same issue or similar.

[@jafizzle95]

Very excited for the part regarding CGNAT. Looking to switch to fiber soon but it's behind CGNAT and I tried to set up a test environment using Tailscale, Headscale, and a VPS but couldn't wrap my head around it. I think the Headscale part added too much complexity so I'll probably revisit it with just Tailscale after watching your tutorial once it's out.

[@walterhaase]

This is exactly what I was looking for! Thank you!!

[@Stevesmate4503]

Ed you are the best. Loved the tune mate kept me engaged

[@Nemesislh]

Nice, did not know of the subnet routing! Good stuff Ed!

[@leonardocarvalho4944]

Greetings from Brazil Spaceinvader One! Thank you for another great video! Please keep with this tailscale videos. I am behind CGNAT and just want to know more about it. Thank You!

[@BartTech]

Absolute gem. Thnx for the video.

[@BruceRichwineJr]

Thank you very much. This video explains why my installation of Tailscale didn’t work properly.

[@TheStaniG]

Can we PLEASE have a tutorial for sharing network drives over tailscale. Im moving accross the other side of the world and would love to be able to do this with my home server. Current tutorials are for pros though.... I get so lost.

[@mathieugoy2236]

Great video as always. Stupid question here: I am not sure I understand the benefits vs a regular wireguard setup. Can you please enlight me? thanks!

[@drmetroyt]

The music is distracting , to understand the video it needs proper attention of the viewer , the music just focus it's attention on itself rather than learning the tailscale part we are enjoying the music LoL .. its distracting please remove the music or lower it way down

[@glepa]

thanks again, love your videos.

[@Phunties]

Thanks Ed, much appreciated as always. A small point of constructive feedback (and this is just my opinion) it would be great if was a little faster paced. I found myself skipping a fair bit to get to the key information.

[@frodemichalsen8961]

Great video. Thanks, Ed.

[@mainframedbs999]

EXCELLENT video as always! For some reason, after creating a subnet router on my unraid machine with --advertise-routes=10.x.x.0/24, the only device I can reach on my network is the unraid server the subnet router is running on. I wonder why I can't reach other devices on my network via that subnet router. What am I missing?

[@AlexKretzschmar]

Love to see this video Ed!

[@Hennie1254]

Thanks for the video! Looking forward to Part 2. Can you use the Unraid server as a exit node? I want my phone to always use my PiHole (in a docker container) and to always use my home internet connection.

[@39zack]

TimeStamps: 0:00: Introduction, what is Talescale? 1:32: Introduction, what does it run on? 1:58: Introduction, what will we look at in this series? 4:12 Introduction, what will we look at in this series? And whats in part1? 5:18 Setting up your Tailscale account 5:54 Setting up your Tailscale account - What about privacy? 8:00 Setting up your Tailscale account, continued 8:24 Download Talescale for different devices 8:55 Installing Talescale on Windows 9:38 Switching to DarkMode 9:55 Renaming Devices 10:30 Installing Talescale on an Unraid Server 10:53 Installing Talescale on an Unraid Server, make sure to use the plugin version 11:43 Installing Talescale on an Unraid Server - Authenticate to add to yout tailnet 12:20 Tailescale on an Unraid Server - Looking at the additional new Tailscale IP 13:15 Using Tailscale with Unriad 13:46 Using Tailscale with Unriad - Is everything working?? 15:25 Setting up Tailscale and subnet routing - What are subnets CIDR and Cider? 17:20 Setting up Tailscale and subnet routing - Routing your whole local LAN 20:00 Setting up Tailscale and subnet routing - Routing the local IP of your server only 22:30 Setting up Tailscale and subnet routing - Routing multiply subnets 23:20 Sharing Access to your Server using Tailscale 25:24 Ending, see you all in Part2

[@JamesArthurHurley]

You are my friggin hero!! 😂

[@DuRtyThuRdY]

Just a little tidbit… IF you have changed the port of your Unraid Dashboard. You will need to add the port number to the IP address that Tailscale gives you to make this work. I’m not sure yet how to add it for the magicDNS stuff.

[@Iam2lazy2register]

Thanks for the brilliant video. Can anybody explain the part at 13:00 ? What does the IP Address have to do with DNS?

[@lukehodgkinson4261]

Great work mate thanks

[@Brian.M]

Epic! 😎👍

[@asong26]

What about the performance impacts of Tailscale vs. Vanilla Wireguard? I hear is pretty noticible.

[@randyday384]

perfect timing. tried setting up the plugin yesterday and having trouble. can you cover exit node functionality in this series?

[@twitchy4511]

im having problems were it wont even let me connect after installing the plugin and changing the dns setting to yes does anyone know how to fix it or having a similar issue.

[@cwm119]

I am having the same issue.

[@RetroSam89]

So i'm curious - when connecting to my unraid server through the IP given to me by tailscale, the internet browser is saying the connection to the site isn't secure? Isn't that a bit worry?

[@mastermoarman]

Thanknyou for this content. Is there any advantage to running it on the server vs in the pfsence ?

[@enzomunoz2519]

Hello, thanks for the video, I'm trying to connect from unraid but it won't let me authenticate. I click on the blue button and it does not connect to tailscale

[@DTech101]

Brilliant thank you🤙

[@ieneseliulian9294]

i just installed folowing your guid but de opera its warning me that the connection is unsecure and its will send password in plain text unprotected, is that normal?

[@Alex-td1pi]

Headscale next?!?! Please

[@IShaderI]

That's self-hosted tail scale right? That seems so much better. Yes please

[@mrlionman]

this is great info. One question, do you know how to share only a specific docker container with someone ie overseer and nothing else?

[@____-bu2jm]

I put in all the IP Forwarding prompts and I still get the message in the Tailscale settings: "Unable to relay traffic This machine has IP forwarding disabled and cannot relay traffic. Please enable IP forwarding on this machine to use relay features like subnets or exit nodes."

[@ophawku]

Ed, Thanks, Dale

[@sandman7793]

Thank you!

[@mastermoarman]

Thank you for thease videos. Is there a reason to have tailscale running on the unraid vs doing it at the fire wall? Tailscale better then using wireguard and ddns on the firewall like pfsence?

[@deodotusalvika8991]

Which better zerotier or tailscale.. and for speed connection..

[@WineCountryFlix]

could you please please make a video on setting up TubeArchivist

[@Sledgemasterrrr]

Can you go over unraid tailscale SSH and how to connect?

[@naitcalo2141]

Hi, good video but I have a question, you showed how to access 2 local servers via tailscale but how that would be if you want to access 2 remote servers and their containers with their local ip instead of tailscale ip. Advertise routes on 2 different remote servers won't work I assume as --accept-routes won't know which route to accept.

[@kristof9497]

Thank you.

[@JamesArthurHurley]

Ed, how can we use this to show our computers in the network pane of Finder in Mac, while we are off site just as if we were on our lan?

[@ivyZorz]

If I understand the subnet routing correctly: Lets say i'm not on the home network, but on some other network. If there was a service on that network that I wanted to access via that same subnet (192.168.1.0/24 for example) I wouldn't be able to as long as my tailscale client was connected? If I wanted to connect to that networks private IPs from within that subnet, I would need to disconnect/close my tailscale client, yes?

[@mrbilky]

Everything worked up to the sign-in for unraid it does not open when I put my credentials in I even created a user to see if there was some underlying issue but no dice, any suggestions?

[@jag5cof]

Help!! I followed Spaceinvader instruction up to installing tailscale for unrain. Thats where I ran into a wall. I'm unable to ping the tailscale ip address for unraind. Any suggestion?

[@TuomoLahtinen]

Is disabling key expiry pointless these days?

[@BLKMGK4]

When I attempt to install the plugin I get a "network failure" downloading the TXZ. Hoping this is something temporary! Server is online and able to reach out so this is weird, never seen this before.

[@BLKMGK4]

DNS issue ugh, all solved!

[@orvillesdad451]

I'm having trouble with the setup of the Unraid Plugin. After I install it and then go to Unraid/Settings/Tailscale, it asks me to ReAuthenticate as Ed says - but the blue button doesn't work. I am already connected to Tailscale on another tab, but it still wants me to authenticate. If I do an authentication through the App on my Macbook, it only adds the Mac. Does anyone know how I can authenticate the Plugin properly?

[@lawrence1986ify]

anyway you can make a part 2 for adguard for the Encryption (HTTPS/QUIC/TLS) with nginx and cloudflare would be nice

[@laov6843]

This approach to subnet routes is not optimal and difficult just for accessing your unraid server. You do not need to bother with using tailscale DNS on your unraid server. What you are doing is allowing your server to access all your tailscale DNS names which are visible in tailscale web UI machines tab. You can have the same results by using magic DNS and having the clients use tailscale DNS on their local client. I personally stopped using IP addresses at all. You can just use the text name say 'imperial-walker':port. When using tailscale with 'use tailscale dns' option this will resolve your tailscale IP and while on local connection this will resolve your local IP. Though if your using pfsense you may need to set up each DNS name in pfsense DNS resolver service.

[@ShawnPitman]

This is what I did by default. But changed to SpaInv1’s method to simplify distributed docker deployment on multiple unraid servers. I think there’s an argument to do it either way. If unraid/docker had a [SERVERNAME] key (like it does for [IP] and [PORT] then your approach would be best in all cases.

[@dnealuk]

erm - can we cut the distracting music?

[@digaum]

Yes, please.

[@charley2070]

Would also love a more subtle music in the background

[@V1N_574]

Just mute the video 😂😂😂

[@GiulianoMazzina]

If I'm ok with setting up the port fowarding, is there any reason not to just use the builtin VPN functionality of unRAID and set up a VPN peer for each device I want to connect it to? I know its not common but I have an IP that doesn't change. I don't pay for a permanent IP but it hasn't changed in 6 years. I also run a godaddy script to update my IP in the DNS entry for my domain name pointing to my server. What are the upsides to using tailscale over Wireguard natively?

[@Turbojugend27]

I mean technically having zero ports open is safer than the ones you open.

[@dkerlee]

I already have Wireguard dialed in and working fine. Is this a needless change in the network?

[@danuw3lls]

Same here I’m not really seeing any advantage. WireGuard is already stupid simple.

[@jmagar88]

Does the Android app still crush your battery?

[@pascalcollet3897]

Thx for the tutorial ed. Please stop shaking that mouse cursor pretty please 😂 Replaced my cloudflare tunnel with that far more simple. Getting the cert to work was a bit tedious though

[@kevinrobbins2429]

Unraid disconnects from tailscale right after authentication.

[@TechySpeaking]

First

[@poedenon]

Have you been able to connect a remote client to a NFS share on your UNraid server over Tailscale?

[@GodmanchesterGoblin]

As a long term Unraid user (13 years), but by no means an expert, I found the explanation of what Tailscale is and what it can do to be completely over my head. As a minimum, for me at least, it probably neeced some graphics rather than just jargon. I gave up not long after the reverse proxy reference, since I have no idea what that is, or whether I might find such a thing useful. I'll stick with OpenVPN for the rare occasions that I need to access my server remotely. I find some of your videos very interesting and useful, but not this one. Sorry.

[@amateurwizard]

I get an Nginx 404 on the Tailscale main page LOL

[@EDACerton]

This happens sometimes if Tailscale can't communicate with the control servers when it starts up... you can try using the "Restart" button on the Settings tab, then wait for a minute or so and reload the page.

[@harblz57]

@SpaceInvadetOne FYI; KZbin is playing games with subscriptions again. I've had to re-subscribe to your channel every day for the last three days; and *twice* just today! 😡

[@JamesArthurHurley]

Where is timestamp guy?

[@39zack]

This is not LTT-WanShow

[@JamesArthurHurley]

@@39zack haha at least someone got it :). But also, timestamp guy would be my hero on every long tech guide where the creator didn’t add the timestamps hahah.

[@39zack]

@@JamesArthurHurley Happy now? :)

[@defyiant]

Music is so annoying turn it down better yet keep it away from such an important video

[@sprocket5526]

Ok. Mayby I'm just an idiot, buy i don't need biwarden, I can actually remember my password, and don't automated credit card info either, do i can't see why I would need bitearden. I can connect to my unraid server using unraid connect, so no need for tilscsæe for that either. Then the whole vpn thing, what does tailcale offer that PIA don't? And accessing my plex server is not a problem or other media files. So I'm having a hard time seeing what tailscale offer, but again, I'm just an idiot on the Internet

[@TheNorthRemember]

you talk and explain too much and repeatedly even with 1.5 speed

[@Stevesmate4503]

Ed you are the best. Loved the tune mate kept me engaged