Remotely access Home Assistant via Tailscale for free!

[@RussSchampers]

I just wanted to thank you for this video. I wanted to emphasize how critical it is to choose the ADD ON. If you incorrectly install the tailscale INTEGRATION, home assistant will not be added as a machine to your tailscale account and your forehead becomes flat.

[@coobix]

I was fighting one night with Wireguard configuration to no avail... Next day after 15 minutes I had a flawless connection with my Home Assistant - just like that! Amazing job!

[@Tailscale]

That experience is what we strive for. Thanks for sharing! 🍌 top banana.

[@groentoft]

I just can't figure it out! Neither the IP address (with port number) or the net.ts address (with port number) gets me to my HA instance. I just can't reach it. What am I doing wrong? On the control panel, its seems like the HA is connected.

[@willrojas]

Same problem, did you find a solution?

[@Tailscale]

Is the client you're unable to connect from also connected to your Tailscale network?

[@groentoft]

@@willrojas Is it in the app? Turns out that you have to put before the IP address

[@CleanVenturesPR]

Same problem, I'm in the same network and client. Cant get it to work. It seems there is a step missing for those of us that are creating a new account for Tailscale.

[@robdoorn5500]

@@willrojas you need your current device to also be in the Tailscape network. Download the app on windows and in the arrow upwards at the right of the taskbar click on the tailscape button and login. that is what did it for me.

[@wrek]

The way you said "which is the fifth option in this list" made me feel like I had to check your math. It's correct.

[@Tailscale]

Counting is hard sometimes -Alex

[@thewebart]

This is what I was looking for. Thank you so much !!!

[@RickyDonker]

I could have done with this video literally the week before you uploaded it, dang heck darn! Love it though and a much needed tutorial, thanks guys!!

[@thewebart]

Did try it just now and the add-on crashes when I activate Tailscale Proxy. Not sure why.

[@Tailscale]

We saw a few comments from you here, did you get this resolved? - Alex

[@thewebart]

Yes. Thank you.

[@vladimirkoldomasov2130]

@@thewebart Can you please share, how you resolved this?

[@Rekrab2007]

Had the same issue, I hadn't enabled HTTPS option in DNS setting within Tailscale admin console.

[@Tailscale]

​@@Rekrab2007 This was an oversight in the original video, thanks for sharing your solution! Tailscale admin console -> DNS -> enable HTTPS certificates

[@Peter-oz7ld]

SOLUTION FOR THOSE EXPERIENCING TAILGATE CRASHING AFTER ENABLING PROXY Simply go in your Tailgate account, go to the DNS menu and enable the HTTPS option :)

[@nateking892]

Thanks that helped me

[@midi-24]

did not work for me directly. The order is important, so I enabled https option, THEN added Proxy and restarted THEN log out and log in on my macbook tailscale and then it worked. Thanks for your video!

[@willrojas]

2:50 does not work, tailscale link is not reachable, maybe now there is an additional step

[@Tailscale]

I just reviewed the video and set up a fresh home assistant to double check, at the time stamp you still need to use the port number (e.g. homeassistant.fqdn.ts.net:8123), only once we configure serve later in the video can you drop the port.

[@willrojas]

​@@Tailscale thanks for replying, yes that's what I meant, my device appears online on tailscale, but when I use the tailscale ip as you mention (e.g. homeassistant.fqdn.ts.net:8123) I get that the site is not reachable. Maybe I have to install tailscale on the devices that want to access that ip? or is not necessary

[@IdahoTim]

Same here. It worked great up until the part about editing the configuration.yaml, rebooting and turning on the tailscale proxy. After that, I couldn't even access it using the direct ip address and port # anymore and the Tailscale tab in HA refused to authenticate my logon. What I did was uninstall/delete everything and stop at the point about editing the yaml file. Now I just use it by adding the port # after the ip address. Works fine that way. The video is great, but it would be better it it showed a "virgin" install because a lot of the screens don't match what you see as a 1st time user on the Tailscale website.

[@robsolway3827]

Just cannot seem to get this to work. Got signed up with Tailscale and everything is set up as per. Devices connected, got my DNS, also went through and set up Tailscale serve as per instructions. Go to a device not on the same wifi network as the HA to test it. get the message 'this site can't be reached' regardless of if I enter with 8123 or without. What could I be doing wrong?

[@kuyamike6757]

the same problem i am facing.

[@kuyamike6757]

followed all and everything steps he mentioned in the video but in the end. "This site can't be reached" not applicable to everyone.

[@gtoons]

Had the same problem until I downloaded & enabled the Tailscale app (download from the app store) on the computer which you are browsing your Home Assistant. Also make sure you enable the HTTPS option in DNS setting within Tailscale admin console.

[@captianmorgan7627]

@@gtoons This. You both have to install Tailscale on the device you want to access it from AND enable HTTPS. It would have been nice if this was covered in the video. It was way too much of a surface level walk through for folks like me who are doing this for the first time and are mostly just "following a recipe".

[@AM-tf8eq]

I am now facing with same problem and I starting to give up. I have done exactly the same as it explained - not working in my case. MagicDNS enabled, HTTPS cert enabled, Addon config proxy enabled, HA config.yaml thrusted proxy seted up and in tailscale admin console I see machine connected so there is no a problem with router before HA (some port forwarding or firewall i guess) but I can't connect by browser by tailscale machine IP adress:port or dns name like machine.NNN.ts.net:port. Anyone have solved this? What should I do now?

[@Automation_done_right]

Hello, I managed to install Tailscale and using it successfully as a tunnel for my home assistaint, the thing is that I'm installing both home assistant and Tailscale as a docker containers so not as an add-on and accordingly I can't do the step of enabling Tailscale as a proxy in 5:25, maybe I'm missing something but I need help to set this in docker container implementation Currently I can access home assistant using http but with HTTPs it doesn't reach it.

[@Tailscale]

Check out our docker mega guide! tailscale.com/blog/docker-tailscale-guide

[@FlemmingWiltonHansen]

Hi, super video !. When I enable the Tailscale proxy, my Tailscale add-on stops. Any idea ?

[@JackJones1]

I have the same issue.

[@Peter-oz7ld]

Me too it keeps stopping since the proxy part

[@Peter-oz7ld]

@tailscale

[@corymosiman9426]

+1

[@corymosiman9426]

After updating my HAOS and core, I was able to see live logs for the add on. I found this gem: [10:18:30] ERROR: Tailscale's HTTPS support is disabled. I then went to tailscale web app > DNS > HTTPS Certificates and enabled. I then restarted the tailscale add on and it worked

[@chrisbaker9030]

This video would have saved me a lot of time when I set it up last month! The Tailscale proxy bit doesn’t work however, the add on crashes with an error that the conf file can’t be found.

[@Tailscale]

Feel free to post the log and I’ll have a look. -alex

[@bmgs1981]

Thanks for sharing. I have a small problem. My homeassistant works with HTTPS on the domain generated by Tailscale without port 8123, but I always need Tascale VPN installed on each machine to access (when i'm at the coffe shop :D, minute 6:10) it, is that?

[@frankenchrisv]

It sounds like you're using the Tailscale 'serve' features, which the HA Tailscale add-on calls 'proxy'. You want the 'funnel' feature if you want to expose your HA admin interface to the public internet. If proxy is already working just set funnel: true in your HA Tailscale add-on configuration.

[@21Lettere]

Question: Home Assistant is in my IOT network and I'd like to *block connections initiated from the IOT network* (this includes HA) to my other tailnet devices, because I don't trust the IOT network 100%. How could I do this? Thank you.

[@MikeBettilyon]

I enjoyed the video as a user of home assistant, tailscale and cloudflare. One issue that keeps me from using tailscale more broadly with home assistant is the tailscale bug when using an iphone connecting to apple carplay. if tailscale is enabled the phone looses connectivity to the internet when connecting to carplay. is this on the roadmap to be addressed?

[@MikeBettilyon]

been doing some testing and thrilled that I am no longer having the issue with carplay and tailscale. Thanks Tailscale!

[@Tailscale]

@@MikeBettilyon Glad to hear it's resolved for you 😅

[@Cardoavenue]

Great video, Alex! 🤘🏽

[@MikeRoss-zv9nm]

Do you leave your Tailscale turned on all the time on your phone? Does that wear your battery down quite fast

[@Magic-Smoke]

Thanks Alex. If you run HA in a docker container then the add-on is not available. I would welcome a video showing the details of how to deal with the proxy in this case. Thanks :)

[@bassslapper3390]

u need to install the hassio version of HA on docker ^-^

[@Ballissle]

Is it possible to run tailscale alongside a normal VPN and Adguard mobile app so that I dont have to keep switching between them when ever I want to access my instance?

[@frankenchrisv]

On mobile? I don't think it's possible on iOS. Not sure about Android. And it's definitely possible on macOS/Linux since I do this there. Works fine on macOS with other VPNs running. But you'll just have to make sure your VPN doesn't try to claim routing support for the tailscale IP range (or any non-tailscale IPs if you use advertise-routes)

[@Wiikendzgoodmix]

Any video coming on how to do this with funnel? Would that allow me to enter that dns in the homeassistant app and access it from anywhere anytime without tailscale app enabled on the device?

[@frankenchrisv]

This is as simple as setting 'funnel: true' in the HA Tailscale add-on configuration. That said, I don't recommend it. You'll be exposing your Tailscale admin page to the public. In theory everything will be fine but it increases the attack surface area quite a bit. I suspect that the video doesn't go into this because of the security concerns and he'd get poo-poo'd big time for suggesting it.

[@Wiikendzgoodmix]

@frankenchrisv Yeah, figuered put there are better ways to do it

[@LeLoud]

HI. Thanks a lot for sharing such resources and details. The community appreciate your work. I'm doing my first step with Tailscale with the HA integration you shared with us. One question here about a possible way to mitigate the exposure of the whole subnet when routing and exit nodes features enabled. Does the option "stateful_filtering" could be one step to mitigate the exposure of the whole subnet. So that only the return outbound traffic to a (known) tailnet device (in the subnet) is allowed while other inbound packets to other IPs in the subnet is dropped (IPs in the subnet not known as tailnet devices). Correct? Cheers ;-)

[@kkaround]

Hey, It seems I follow all the steps but when I use the full link I am not able to connect to the home-assistant ( I tried with port number as well). I am getting the following message "This site can’t be reached". I notice that home-assistant connection dot is greay and not green on tailscale website. How can I fix that?

[@ruimpinho]

Same, did you find the solution?

[@kkaround]

@ruimpinho I end up using duckdns and I had same issue with it as well. My router was blocking it so I end up changing settings on my router.

[@alfonta]

is it good for a website i build in my local nas (conected to internet) and i want to share this website with a client ?

[@howiehowie93]

Brilliant !!! - spent the day looking for a duckDNS alternative ''cos it's offline. Then I remembered I had a Tailscale account but couldn't get it to hook up. Till five mins ago that is !!! So TYVM for this vid

[@Tailscale]

Quack. 🦆

[@jayakumarduraisamy5138]

doesnt work on HA running in VirtualBox with windows host. no errors in addon log. could see ha in connected status in tailscale but could not access the url.

[@KS-wr8ub]

Maybe a strange question Alex, is it possible to join a device in a remote location (my office) with my home HA over Tailscale? Among other stuff I have one of my backup servers in my office and that's connected to a smart plug for scheduled powering on/off. The BIOS doesn't have that option so I solved it this way. I also have ATV4K with Tailscale installed in the office so I have access to the smart plug through Tailscale even if the backup server is off. Now, is it possible to somehow access this smart plug over the Tailnet, through my HA?

[@Tailscale]

Subnet routing assuming your Office computer can route packets to that smart plug? -Alex

[@madtraxx1895]

@Tailscale, this works fine, but I’m unable to setup a connection to a second home assistant instance using the Remote Home assistant plugin. The devices are able to communicate with each other using their local fqdn. But it will not work when using the fqdn from tailscale (both are running and connected to tailscale). Any ideas?

[@NicksStuff]

But you *need* to have Tailscale running on your phone 24/7 to connect to HA when away from home, right?

[@Tailscale]

For your most common tasks (for me this is opening the garage door remotely) I have an iOS shortcut that toggles Tailscale on and runs the HA action.

[@gavin1215]

When I try to enable the proxy option the connection and tail scale add on crash,

[@VillSid]

Nice guide for a more sain person... I have DNS forwarding setup on my router with traefik proxy managing it for a local connection

[@Dr.Sri_Harsha_Guthikonda_G]

mine does not work. i tried duckdns, others..none of them work any ideas?

[@SantaGamerYoutube]

same

[@ruimpinho]

did you find the solution?

[@dovy6]

Beeblebrox?

[@theaustindude]

I am able to access my HA instance using the port number (with Proxy turned off), but when I turn on the Tailscale Proxy, I can't access at all and get the following error in the logs: ERROR: Tailscale's HTTPS support is enabled, but Home Assistant is not accessible through plain HTTP connection

[@simonrahnster]

What adress are you using when connecting?

[@theaustindude]

@@simonrahnster any of the addresses provided by the tailscale dashboard with the :8123 port works. Removing the :8123 does not work and nothing works when I have the proxy switch enabled.

[@needbrew99]

Is there a way to not use the tailscale split DNS to access by my cloudflare domain name. I have local DNS services already in my home lab

[@markusgebert9023]

hi ich möchte 2 Home Assistants mit Remote Home-Assistant verbinden geht das?

[@connectedsecure]

I wish you had a video on Docker installation! I migrated from VM to Docker installation and I can't get Tailscale Serve to work with port 8123... (probably going to migrate again just for this!) Also, while I'm at it, in my wishlist: a video on ACL % tags (Proxmox but also iOS/macOS clients) would be so good! AND a video on network isolation and security! (I'll stop here because I'll come up with a lot of video ideas. Tailscale is fascinating! I'll probably make a video for the French market myself.)

[@Tailscale]

We have a docker deep dive on this channel! HTH

[@joseo.cordero7286]

Can you use two different accounts (two different user emails) on a single home assistant tailscale instance? How can 2 different persons connect to the same home assistant remotely without sharing their gmail account password?

[@maxwellijewemen7948]

The tailscale in unraid does not have the add-on from the settings. Is there a way to add this to unraid?

[@Tailscale]

Big changes coming to unraid real soon. We’ve partnered with them to add Tailscale to the base OS. No more plugins.

[@Elite_lifestyle]

Studio code server dose not open anything i click the addon on the task bar and it dosnt show anything just blank any ideas

[@gunnarbjru9685]

Hi, I want to connect two Home Assistants with "Remote Home-Assistant" found in HACS. The local HA in my house and the remote HA at my cabin. Is that possible trough Tailscale?

[@frankenchrisv]

yes it's very possible

[@f2f.photography]

I got to the step where you first tested the external tailscale access and I got this error: DNS_PROBE_FINISHED_NXDOMAIN. Any idea what could be causing that?

[@Mark3xtrm]

It is possible to do this with Headscale and a public dynamic IP, with a router (in which vlan it is Hass) lan plugged to a 5G modem (that gives the router the connection (no ip passthrough possible)?

[@andrewf403]

what I don't get, why did you have to configure domain to LAN HA's IP address and enable subnet routing, instead of just pointing domain to Tailscale IP of HA?

[@KevCampbell]

I've made sure I have HTTPS enabled in my TailScale account DNS settings, but the add-on still crashes when I enable the proxy - works fine otherwise. No certificate has been issued to the machine according to the machines tab in TailScale. Just get an exit code, usually 1, and the add-on stops.

[@SwingsNRoundabouts1955]

I'm assuming this doesn't work if using a virtual machine to run home assistant as i have followed the video religiously and nothing is working

[@benbrodbeck3699]

I'm running HA via a docker container. Is it possible to do this some other way for users like me?

[@Tailscale]

Check the previous video on the channel. That’s probably the easiest method for you.

[@TonyKenkerioni]

Hi, i've installed HA on my Synology NAS but can't find my addons in the same spot as you. Latest version. Idk.😢

[@Chris-l5k7j]

Im using home assistant on proxmox will this work?

[@Tailscale]

If it's a Home Assistant OS VM, then yes.

[@meehoo3108]

Hello I cant start addon studio code server, its crashing HA, any help?

[@halogen25]

Ok, second attempt got this working up to the ip address + port. Hostname sill not working.

[@TubeSkaterRudy]

I would like to update my Tailscale to version 1.66 but because I know it solves the security risc found in previous versions. But how?

[@Tailscale]

This is community and unofficial add-on is maintained by Frenck. He does a great job of keeping things up to date but sometimes there is a short period between an upstream release and it showing up in Home Assistant. You can open issues against the add-on here. github.com/home-assistant/core/tree/dev/homeassistant/components/tailscale

[@AndroidDudesOnWeb]

Followed the steps but it is not working for me. I installed tailscale as add-on and while accessing the url after setting the proxy (configuration.yaml) as explained in your video, it is not working. Not sure what is missed. Getting "This site can’t be reached"

[@TrochBryan]

same problem here, log : "Tailscale's HTTPS support is disabled" ?

[@Tailscale]

@@TrochBryan For this one, you'll need to go to your Tailscale admin console -> DNS -> and then enable HTTPS certificates.

[@wacotaqo]

This went well till I added tailscale proxy/funnel and got a "502: bad gateway" error from tailscale.

[@wacotaqo]

Duh, resolved this by enabling "https certificates" in the Tailscale "DNS" configuration. SBS.

[@Tailscale]

Thanks for following up!

[@eliekfouri2043]

Amazing Is it possible to use exit node in my home network on a computer that Tailscale can't be installed?

[@Tailscale]

Yes

[@dartfrogdk]

mine crashes too when tailscale proxy is enabled

[@Tailscale]

Check the logs. There’ll be a hint in there!

[@testtail]

cool video.😁 Can you make video about nextcloud?

[@Tailscale]

We have a Nextcloud video on the list!

[@HannesHerrmann-tw6om]

great video. it would be asier to make use of the integrated file editor tho, since no big downlaod is needed :)

[@tfeagans]

Amazing! Nice tutorial.

[@malzbier1339]

Nice tutorial as usual ❤👍🏻

[@JamesTenniswood]

Great video, very useful

[@needMoreInput]

Yet another banger.

[@jonihakala862]

Hey, im having two errors when trying to start addon any help? ERROR: Unable to connect to Home Assistant as reverse proxy ERROR: Please check your configuration based on the add-on's documentation under "Option: proxy"

[@JurajBubniak]

Also got that, the crucial missing part was adding proxy_and_funnel_port so the config looks like: proxy: true proxy_and_funnel_port: "443"

[@taksela]

I was trying to remote to my desktop PC using RDP software on Android but always connection fail.

[@taksela]

On PC to PC is fine

[@21espeland]

Thanks for an instructive video. I'm almost there, but Tailscale is stopping just seconds after I start it. From the log, I'm getting this message: "ERROR: Tailscale's HTTPS support is disabled." Suggestions would be appreciated.😅

[@Duane_A]

Tailscale admin console -> DNS -> enable HTTPS certificates

[@JackJones1]

@@Duane_A Thank you!!

[@mydreamisfreedom]

Что-то когда ставлю опцию proxy, tailscale просто перестаёт работать, не запускается. Всё делал по инструкции. Но да ладно, и так устраивает, спасибо за видео

[@saveferris99]

Can't connect--says " (site)’s DNS address could not be found. Diagnosing the problem. DNS_PROBE_POSSIBLE

[@saveferris99]

using mac os app. Windows and android does work

[@MartinKli56]

I have tried tailscale on my iphone and it is massively draining my battery. This is not a good solution.

[@dissraps6034]

Sounds like you have a shitty phone

[@sowmyagowrishankar]

Thank you so much for this video!!

[@xsky134]

This doesn't work for me. I've followed the instruction from a-z but still not working. what am I missing?

[@Tailscale]

Ensure you're entering before the FQDN URL because Tailscale serve does not auto redirect http to https.

[@rukhanzakaria]

Wow nice video, this is become zerotrust alternatif ❤

[@sebastiaancoenraats1854]

Hero!!! Super thanks!!

[@Suchtzocker]

So how do i install it when i dont run Home Assistant as a OS and dont have the addon tab 😅 feels like im going to study Docker again for some weeks now 😂 Im way too afraid to break networking on my containers leaving me with non working Home Automation till i trouboeshootet for 2 Weeks dtraight after coming home from work 😢

[@mariuschirita2017]

Everything work fine until I am activating Tailscale Proxy, then I am getting this : INFO: Service Tailscale web exited with code 256 (by signal 15) ... and home assistant can only be accessed directly to local IP and tailscale app is not running. configuration.yaml was edited per instructions.

[@julimolc]

Excelent. Thank you so much

[@betinelu]

When I activate Tailscale Proxy and restart, the addon is blocked and stops. Open WEB UI cannot be opened, the message appears "The add-on seems to not be ready, it might still be starting. Do you want to try again?" and 2 options No and Retry. It only works if I cancel Tasicale Proxy and start.

[@akiresusas]

@tailscale i have the same problem on 0.18.0 and homeassistant green v2024.5.3

[@OffirGonenSomething]

I also have the same issue. The addons stops after enabling the proxy.

[@Peter-oz7ld]

Did any of you figure it out?

[@scottgray6099]

Straight away ran into a problem. Click settings. Ok. Click add-ons.....nope there is no add-ons. I have areas and zones above and dashboards below...but not add-ons. Well that's fucked it. :D

[@Tailscale]

Are you using home assistant os?

[@scottgray6099]

​@@Tailscaleno 😂 I realised after my comment. Did not know there were different versions. New to the world of servers and tailscale (and proxmox)

[@livium2000]

Service Tailscale web exited with code 256 (by signal 15) :(

[@nikotakai8796]

Soooooo, this is safe? I feel like there must be some kind of catch. This seems to be too good to be true.

[@thewebart]

This is what I am getting: 2024/03/30 08:48:19 magicsock: derp-8 connected; connGen=1 [08:48:19] INFO: Starting NGinx... [08:48:21] INFO: Tailscale is running [08:48:21] NOTICE: The add-on uses userspace networking mode. [08:48:21] NOTICE: If you need to access other clients on your tailnet from your Home Assistant instance, [08:48:21] NOTICE: disable userspace networking mode, that will create a "tailscale0" network interface on your host. [08:48:21] NOTICE: Please check your configuration based on the add-on's documentation under "Option: userspace_networking" s6-rc: info: service post-tailscaled successfully started s6-rc: info: service taildrop: starting s6-rc: info: service serve: starting s6-rc: info: service taildrop successfully started s6-rc: info: service serve successfully started s6-rc: info: service legacy-services: starting [08:48:21] ERROR: Tailscale's HTTPS support is disabled s6-rc: info: service legacy-services successfully started [08:48:21] INFO: Service serve exited with code 1 (by signal 0) s6-rc: info: service legacy-services: stopping s6-rc: info: service legacy-services successfully stopped s6-rc: info: service taildrop: stopping s6-rc: info: service serve: stopping s6-rc: info: service nginx: stopping s6-rc: info: service serve successfully stopped [08:48:21] INFO: Service taildrop exited with code 256 (by signal 15) s6-rc: info: service taildrop successfully stopped s6-rc: info: service post-tailscaled: stopping s6-rc: info: service post-tailscaled successfully stopped s6-rc: info: service tailscaled: stopping [08:48:21] INFO: Service tailscaled exited with code 256 (by signal 15) s6-rc: info: service tailscaled successfully stopped [08:48:21] INFO: Service NGINX exited with code 0 (by signal 0) s6-rc: info: service nginx successfully stopped s6-rc: info: service init-nginx: stopping s6-rc: info: service web: stopping s6-rc: info: service init-nginx successfully stopped [08:48:21] INFO: Service Tailscale web exited with code 256 (by signal 15) s6-rc: info: service web successfully stopped s6-rc: info: service legacy-cont-init: stopping s6-rc: info: service legacy-cont-init successfully stopped s6-rc: info: service fix-attrs: stopping s6-rc: info: service base-addon-log-level: stopping s6-rc: info: service fix-attrs successfully stopped s6-rc: info: service base-addon-log-level successfully stopped s6-rc: info: service base-addon-banner: stopping s6-rc: info: service base-addon-banner successfully stopped s6-rc: info: service s6rc-oneshot-runner: stopping s6-rc: info: service s6rc-oneshot-runner successfully stopped

[@Tailscale]

Looks like you need to turn on HTTPS in the Tailscale admin console.

[@thewebart]

@@Tailscale Thanks! This solved the issue.

[@jimbrewer5821]

@@Tailscale Alex, you may want to pin a comment on this required HTTPS setting. I was not able to get the FQDN without port working until I dug into the admin console to enable HTTPS (I'm assuming it's disabled by default). P.S., Thanks for the great informative videos! 🙂

[@dogcatmause]

Does not work! I added tailscale to my phone, it does not connect.