Skip to content

10-tailscale-vpn.md

Latest commit

 

History

History
52 lines (32 loc) · 1.78 KB

10-tailscale-vpn.md

File metadata and controls

52 lines (32 loc) · 1.78 KB

README > VPS Infra > Tailscale VPN

← Traefik DNS Challenge | Umami Analytics →

Tailscale VPN

Protect sensitive environments via Tailscale VPN. Only devices connected to the Tailscale network can access protected routes.

Protected routes:

  • dokploy.your-domain.com — Dokploy panel
  • traefik.your-domain.com — Traefik dashboard
  • preview.*.your-domain.com — Preview environments
  • experiment.*.your-domain.com — Experiment environments
  • prisma-studio.*.your-domain.com — Prisma Studio (database access)
  • umami.your-domain.com — Umami analytics
  • and more...

1. Install Tailscale on the VPS

Tailscale is natively integrated into Dokploy.

Follow the official guide: Dokploy - Tailscale Integration

2. Configure DNS

Add DNS records for VPN-protected domains — see DNS Config — VPN.

3. Switch to DNS Challenge

VPN-protected domains are not publicly accessible, so Let's Encrypt cannot validate certificates via HTTP. Make sure you switched to DNS Challenge — see Traefik DNS Challenge.

Usage

  1. Connect Tailscale on your device
  2. Access protected URLs normally in your browser

Security

Layer Protection
Network VPN Tailscale (WireGuard)
Application Basic Auth Traefik (Prisma Studio)
Transport HTTPS (Let's Encrypt DNS Challenge)

← Traefik DNS Challenge | Umami Analytics →

README > VPS Infra > Tailscale VPN