Master Tailscale on Unraid Pt 1: Easy Setup, Subnet Routing & Secure Sharing

[@RichardErkens]

Thanks! For all the videos about unraid. Because of you I bought unraid instead of go the Truenas road

[@ruimoura]

sane here, this guy is a legend

[@SpaceinvaderOne]

Your very welcome Richard. Thanks so much for the superthanks. I am so glad you find the videos useful :)

[@koopa2k]

of course you could always deploy truenas as a VM within Unraid and get the best of both worlds - depending on your requirements of course.

[@hendrikrobach7587]

FINALLY I found you! I was looking for a simple and easy to understand and follow KZbin Channel on Unraid! Thank you for your passion explaining the complex content in easy to follow words.

[@EDACerton]

Thanks for doing a video that covers the plugin installation! The Tailscale DNS setting is generally not needed on Unraid installs, and can cause unexpected behavior in some cases since the DNS implementation on Unraid is very simple (resolv.conf only). I generally recommend that folks leave that setting off unless there's a specific need for it -- that's why I have it hidden in the basic settings. You can still access Unraid via MagicDNS with the setting turned off. The reason that changing that setting fixed the WebGUI was because Tailscale restarts when settings are changed. You can accomplish the same result by using the Restart button in the Tailscale settings. (I have an improvement coming in the next update that will hopefully eliminate this restart, it only affects the initial login to Tailscale but is still annoying.) Also, on an unrelated note, you don't have to use the CLI to advertise routes... if you click the "Viewing" button in the top right of the "Tailscale" page, it'll let you switch to an edit mode and add routes via the web interface.

[@S_Bat]

Thank you for the great info! Looking into MagicDNS now :)

[@sandman7793]

@@pascalcollet3897 edacerton is not the one who created this video. Not the same person.

[@EDACerton]

@@sandman7793 Correct, but I do appear in the video :)

[@sandman7793]

@@EDACerton didn't realize.

[@tensaikokujin]

When I try this I get "Cannot access this device’s Tailscale IP. Make sure you are connected to your tailnet, and that your policy file allows access." Do we need to change something in the policy file or the plugin settings?

[@MegaBlindy]

I've been using tailscale for ages and this video just made me realise... Why I don't advertise my whole subnet instead of just my unraid server, it makes my life so much easier

[@jaykay5369]

Just joined you on Patreon - absolutely love your guides. You are the sole driving force behind me setting up 2 Unraid servers over the past couple of years. Without you, I would not only be lost, but likely not even have a working Unraid setup. Very much looking forward to Part 2, as I use Swag, after following your Nextcloud guide.

[@JoeSee]

TRULY appreciate this video, thank you! This was incredibly helpful in helping me understand subnet routes within Unraid. This is like the holy grail of a VPN configuration for me.

[@SuperDerek]

what a great coincidence! I had just finished installing the docker version of Tailscale... just switched to the plugin because of this video, and did it in 30 minutes. Thanks!

[@ImNazmulHossain]

I was looking for a wireguard VPN configuration for unRAID and found it pretty complex to set up but OMG! this is life saver instruction! I appreciate how easily you explain.

[@39zack]

TimeStamps: 0:00: Introduction, what is Talescale? 1:32: Introduction, what does it run on? 1:58: Introduction, what will we look at in this series? 4:12 Introduction, what will we look at in this series? And whats in part1? 5:18 Setting up your Tailscale account 5:54 Setting up your Tailscale account - What about privacy? 8:00 Setting up your Tailscale account, continued 8:24 Download Talescale for different devices 8:55 Installing Talescale on Windows 9:38 Switching to DarkMode 9:55 Renaming Devices 10:30 Installing Talescale on an Unraid Server 10:53 Installing Talescale on an Unraid Server, make sure to use the plugin version 11:43 Installing Talescale on an Unraid Server - Authenticate to add to yout tailnet 12:20 Tailescale on an Unraid Server - Looking at the additional new Tailscale IP 13:15 Using Tailscale with Unriad 13:46 Using Tailscale with Unriad - Is everything working?? 15:25 Setting up Tailscale and subnet routing - What are subnets CIDR and Cider? 17:20 Setting up Tailscale and subnet routing - Routing your whole local LAN 20:00 Setting up Tailscale and subnet routing - Routing the local IP of your server only 22:30 Setting up Tailscale and subnet routing - Routing multiply subnets 23:20 Sharing Access to your Server using Tailscale 25:24 Ending, see you all in Part2

[@JamesArthurHurley]

You are my friggin hero!! 😂

[@glepa]

thanks again, love your videos.

[@rallygallery]

Hi Ed. Excellent as ever. Have been using Tailscale for a while but as ever you plugged in the gaps! The first one on using the plugin and not container. Great advice and have switched over. Looking forward to the rest of the series. Keep up the superb work!

[@reallyshortfacedbear]

Man this video is coming at a perfect time! I have been using tailscale for over a month, and love how easy it was to setup. I am using it to remotely access my unraid server everyday from a different country with no hiccups. I just wanted to start learning about the more advanced features of tailscale, like subnet routing, sharing devices and SSH via tailscale. Excited for part 2!

[@patrickburton6130]

Thanks!

[@kimmerrild3487]

I always enjoy your videos Ed, but this is one of the better ones, and super help full. Its an awesome way to invite people into your system if you need help, or just wanna share with friends and family. I use the build in wireguard, and use it daily, but this is more versatile. I also do agree that reverse proxying and opening up the entire system to the wider internet is a bad thing, (If you don't haft to) and we should all try and keep things as tight as possible.

[@Elmojomo]

Oh man, I can't wait for part 3!! I'm currently stuck in CGNAT limbo with T-Mobile business internet. I've been absolutely pulling my hair out, trying to get it working properly with my hosted services. Part 1 already helped a little, but since I had the tailscale plugin already, it was mostly tweaking. I'm going to watch Part 2 now, and will be eagerly waiting for Part 3. :D

[@flipsyde224]

I was using Tailscale before but didn't know about the subnet routing stuff. Super helpful - thank you!

[@markshaz8691]

I didn't learn anything in this video, but I have in so many of your other videos, thanks for doing these.

[@js889]

Thank you so much for the video. Looked so long for a solution to not use the tailscale ip with port anymore. Didnt knew their was a plugin.

[@arturorubio-w1m]

I’m fan of your work about build new machines and rebuild the network , some heavy computing

[@fredamn76]

Looking forward to the next video about Tailscale🎉

[@jgz2]

Thanks Ed. Brilliant. I was using the container method. Deleted that and replaced with the plugin. Looking forward to the next in the series.

[@jasonpluis3493]

YES! The advice on advertising subnets is greatly appreciated.

[@shootinputin6332]

Great video Ed, thank you (I enjoy the music)

[@Stevesmate4503]

Ed you are the best. Loved the tune mate kept me engaged

[@sw20matt]

Thank you for another great video!

[@aerobrain2001]

I've been using Tailscale for a while and love it. But I had no idea how to do the IP advertising. That will be awesome for remote access!! Thank you!

[@walterhaase]

This is exactly what I was looking for! Thank you!!

[@wilsonr5982]

Immensely helpful, as always. Thank you!

[@Hennie1254]

Thanks for the video! Looking forward to Part 2. Can you use the Unraid server as a exit node? I want my phone to always use my PiHole (in a docker container) and to always use my home internet connection.

[@Nemesislh]

Nice, did not know of the subnet routing! Good stuff Ed!

[@leonardocarvalho4944]

Greetings from Brazil Spaceinvader One! Thank you for another great video! Please keep with this tailscale videos. I am behind CGNAT and just want to know more about it. Thank You!

[@cam_934]

I believe Tailscale is now also an app for Apple 4K TV so you should be able to give the apple media player client remote access to your unraid media server.

[@zippi777]

As always GREAT JOB MAN! I love your usefull videos!

[@tvd1188]

Haven't watched this all yet, but i just did a tailscale on my unraid server, but i didnt use docker, but plugins instead. working great so far.

[@gerestragui]

11:38 plugin intalled

[@justinthompson6920]

For those at 13:14 in the video trying to log into Unraid for the first time, if it's failing you might need to add the port to the end of the URL. For example, my Unraid login is port 1115 (not the default) and in order to get the login page to work I had to add :1115 to the end of the IP address, then it worked like a charm.

[@Moose1207]

Thank you for this! I was using Tailscale when it first showed up as a docker container, there was no plugin at that time (unless I missed it somehow lol) This works loads better than the container version.

[@drmetroyt]

The music is distracting , to understand the video it needs proper attention of the viewer , the music just focus it's attention on itself rather than learning the tailscale part we are enjoying the music LoL .. its distracting please remove the music or lower it way down

[@ObnoxiousMedic7]

`dragontailscale` is a game of thrones reference my behind. This is a reference to a great animated show from the 90's... Great info as usual sir, thanks a lot!

[@seantaylor9724]

Awesome video keep up the great work

[@exzacklyright]

Setting up right now. Thanks!

[@joelfrojmowicz]

Hi Ed, once again, another great video! Can I just ask you for your next videos to lower the volume of the background music? It's hard to understand for non native english speakers with this music on the background...

[@Moose1207]

I am a born and raised English speaker with good hearing, and I had difficulty hearing him sometimes. The background music is indeed a little too loud and annoying.

[@BartTech]

Absolute gem. Thnx for the video.

[@muzsomani]

Is there anby guides to have tailscale work with pi-hole and then all devices local and remote can utilise it securely?

[@twitchy4511]

im having problems were it wont even let me connect after installing the plugin and changing the dns setting to yes does anyone know how to fix it or having a similar issue.

[@cwm119]

I am having the same issue.

[@jafizzle95]

Very excited for the part regarding CGNAT. Looking to switch to fiber soon but it's behind CGNAT and I tried to set up a test environment using Tailscale, Headscale, and a VPS but couldn't wrap my head around it. I think the Headscale part added too much complexity so I'll probably revisit it with just Tailscale after watching your tutorial once it's out.

[@Goygle]

Great video as always. Stupid question here: I am not sure I understand the benefits vs a regular wireguard setup. Can you please enlight me? thanks!

[@roblewis6498]

So do i need wireguard installing before hand?

[@Iam2lazy2register]

Thanks for the brilliant video. Can anybody explain the part at 13:00 ? What does the IP Address have to do with DNS?

[@weholmes5315]

Any changes or suggestions for using Tailscale on 7.0.0? I thought it would be integrated into 7.0.0 Should we install and configure the Tailscale plug-in the same way? Just wondering if I need to do things differently on a new Unraid server

[@mrlionman]

this is great info. One question, do you know how to share only a specific docker container with someone ie overseer and nothing else?

[@mastermoarman]

Thanknyou for this content. Is there any advantage to running it on the server vs in the pfsence ?

[@RetroSam89]

So i'm curious - when connecting to my unraid server through the IP given to me by tailscale, the internet browser is saying the connection to the site isn't secure? Isn't that a bit worry?

[@enzomunoz2519]

Hello, thanks for the video, I'm trying to connect from unraid but it won't let me authenticate. I click on the blue button and it does not connect to tailscale

[@Sledgemasterrrr]

Can you go over unraid tailscale SSH and how to connect?

[@JamesArthurHurley]

Ed, how can we use this to show our computers in the network pane of Finder in Mac, while we are off site just as if we were on our lan?

[@randyday384]

perfect timing. tried setting up the plugin yesterday and having trouble. can you cover exit node functionality in this series?

[@TheStaniG]

Can we PLEASE have a tutorial for sharing network drives over tailscale. Im moving accross the other side of the world and would love to be able to do this with my home server. Current tutorials are for pros though.... I get so lost.

[@cdb1957]

How would I create a subnet for a server that's inside a docker on unraid?

[@mrbilky]

Everything worked up to the sign-in for unraid it does not open when I put my credentials in I even created a user to see if there was some underlying issue but no dice, any suggestions?

[@ivyZorz]

If I understand the subnet routing correctly: Lets say i'm not on the home network, but on some other network. If there was a service on that network that I wanted to access via that same subnet (192.168.1.0/24 for example) I wouldn't be able to as long as my tailscale client was connected? If I wanted to connect to that networks private IPs from within that subnet, I would need to disconnect/close my tailscale client, yes?

[@MrLloyd80]

These tutorials age great! Any chance you could make one that describes how to use Tailscale and "Taildrive" to enable remote users access to a dedicated network share? My brother and I both have our own servers but would like to "backup" our family photos remotely incase our local servers crash and we lose the data. Seems like this would be a perfect use case. He could store important things on my server and vice versa.

[@asong26]

What about the performance impacts of Tailscale vs. Vanilla Wireguard? I hear is pretty noticible.

[@sergioiacobucci2189]

Hmmm in my Tailscale plug in, I go to settings and I notice that my Wireguard port is empty?

[@mainframedbs999]

EXCELLENT video as always! For some reason, after creating a subnet router on my unraid machine with --advertise-routes=10.x.x.0/24, the only device I can reach on my network is the unraid server the subnet router is running on. I wonder why I can't reach other devices on my network via that subnet router. What am I missing?

[@frodemichalsen8961]

Great video. Thanks, Ed.

[@sebarem0]

The Wireguard Port ist set to 0 in my Tailscale Plugin. This can't be normal since I can't connect to my Unraid server via the Tailscale IP address my server got.

[@liz4876]

After installing Tailscale and going to settings, I get a "404 Not Found" with nginx below it. The gui doesn't load. I can access the plugin settings but that's it. I'm stuck for now. Been scouring forums for over an hour with no solution...

[@mastermoarman]

Thank you for thease videos. Is there a reason to have tailscale running on the unraid vs doing it at the fire wall? Tailscale better then using wireguard and ddns on the firewall like pfsence?

[@RandomMike81]

Hi, after following the guide, binhex deluge no longer connects unless tailscale is disabled any ideas to fix the issue?

[@RandomMike81]

Fixed had to disable dns in settings and again in the command line all working now

[@naitcalo2141]

Hi, good video but I have a question, you showed how to access 2 local servers via tailscale but how that would be if you want to access 2 remote servers and their containers with their local ip instead of tailscale ip. Advertise routes on 2 different remote servers won't work I assume as --accept-routes won't know which route to accept.

[@DuRtyThuRdY]

Just a little tidbit… IF you have changed the port of your Unraid Dashboard. You will need to add the port number to the IP address that Tailscale gives you to make this work. I’m not sure yet how to add it for the magicDNS stuff.

[@ieneseliulian9294]

i just installed folowing your guid but de opera its warning me that the connection is unsecure and its will send password in plain text unprotected, is that normal?

[@deodotusalvika8991]

Which better zerotier or tailscale.. and for speed connection..

[@jag5cof]

Help!! I followed Spaceinvader instruction up to installing tailscale for unrain. Thats where I ran into a wall. I'm unable to ping the tailscale ip address for unraind. Any suggestion?

[@AlexKretzschmar]

Love to see this video Ed!

[@CourtRoss]

I got everything set up. However, I cannot see my local machines while TailScale is enabled. If I disable the service, they work again. Has anybody else run into this? It seems to happen quite a bit, but nobody has a fix for it.

[@orvillesdad451]

I'm having trouble with the setup of the Unraid Plugin. After I install it and then go to Unraid/Settings/Tailscale, it asks me to ReAuthenticate as Ed says - but the blue button doesn't work. I am already connected to Tailscale on another tab, but it still wants me to authenticate. If I do an authentication through the App on my Macbook, it only adds the Mac. Does anyone know how I can authenticate the Plugin properly?

[@BLKMGK4]

When I attempt to install the plugin I get a "network failure" downloading the TXZ. Hoping this is something temporary! Server is online and able to reach out so this is weird, never seen this before.

[@BLKMGK4]

DNS issue ugh, all solved!

[@____-bu2jm]

I put in all the IP Forwarding prompts and I still get the message in the Tailscale settings: "Unable to relay traffic This machine has IP forwarding disabled and cannot relay traffic. Please enable IP forwarding on this machine to use relay features like subnets or exit nodes."

[@splatman2]

Thank you so much for this video. Talk about simplicity and the ability to get into your server when you're outside of your network spaceinvader one. Thank you for making this video. I did notice though I ran into an issue. Plex was kicking out, secure connection and was no longer available after a short period of time after installing this plug-in. On Unraid 6.12.9 I found the problem to be I needed to update the unraid server software to 6.12.13 And that cleared up the problem been stable for several days now, but it was causing indirect connections outside of the home before updating. I hope this helps. Anyone else with the same issue or similar.

[@TuomoLahtinen]

Is disabling key expiry pointless these days?

[@lukehodgkinson4261]

Great work mate thanks

[@dkerlee]

I already have Wireguard dialed in and working fine. Is this a needless change in the network?

[@danuw3lls]

Same here I’m not really seeing any advantage. WireGuard is already stupid simple.

[@BruceRichwineJr]

Thank you very much. This video explains why my installation of Tailscale didn’t work properly.

[@Phunties]

Thanks Ed, much appreciated as always. A small point of constructive feedback (and this is just my opinion) it would be great if was a little faster paced. I found myself skipping a fair bit to get to the key information.

[@khanv1ct244]

I can't access the IP that Tailscale gives me. Not sure what I'm doing wrong.

[@khanv1ct244]

I've been trying to get this working for over a day and for whatever reason it's suddenly working. Not sure what the fix was.

[@DTech101]

Brilliant thank you🤙

[@GiulianoMazzina]

If I'm ok with setting up the port fowarding, is there any reason not to just use the builtin VPN functionality of unRAID and set up a VPN peer for each device I want to connect it to? I know its not common but I have an IP that doesn't change. I don't pay for a permanent IP but it hasn't changed in 6 years. I also run a godaddy script to update my IP in the DNS entry for my domain name pointing to my server. What are the upsides to using tailscale over Wireguard natively?

[@Turbojugend27]

I mean technically having zero ports open is safer than the ones you open.

[@jmagar88]

Does the Android app still crush your battery?

[@mexvids]

followed step by step, added subnets just as described in the video, still can´t access local network :/

[@TheOriginalJoeBloggs]

Dark mode in Unraid please

[@BK-ms6xx]

@Spaceinvader One, Thank you for the awesome tutorial! It was very detailed, and you explained everything in a way that made it really simple to follow. I truly appreciate the effort you put into it. I do have one issue that I’m hoping you can help me with, and a request for a potential follow-up tutorial: Issue: When I’m connected to Tailscale on my Mac, I’m unable to open the Plex WebUI from my Unraid server. I’m experiencing the same behavior on my iPad as well. While I can access the Unraid server and other Docker WebUIs without any problem, Plex specifically doesn’t seem to work. Request: Could you please consider extending your video or creating another tutorial on how to access shares (folders, data) from the Unraid server remotely with Tailscale? That would be incredibly helpful! Thank you again for your amazing content!

[@CiK9-Krew]

Unraid disconnects from tailscale right after authentication.

[@sandman7793]

Thank you!

[@Brian.M]

Epic! 😎👍

[@lawrence1986ify]

anyway you can make a part 2 for adguard for the Encryption (HTTPS/QUIC/TLS) with nginx and cloudflare would be nice

[@WineCountryFlix]

could you please please make a video on setting up TubeArchivist

[@kristof9497]

Thank you.

[@ophawku]

Ed, Thanks, Dale

[@Alex-td1pi]

Headscale next?!?! Please

[@IShaderI]

That's self-hosted tail scale right? That seems so much better. Yes please