1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45

# tailproxy

A tiny reverse proxy to expose apps over Tailscale as their own application/service.

## Config

- `hostname`: The tailscale hostname, i.e. "git" would let you use "http://git" assuming you have MagicDNC enabled
- `auth-key`: Tailscale/tsnet auth key for authenticating with Tailscale
- `funnel`: Whether to enable as a Tailscale funnel
- `data-dir`: The tsnet data directory, where things like authentication information/tsnet logs live (default is a `.tailproxy` dir created in the working directory)
- `port`: The port to *proxy*

## Nix Usage

As a flake:

```nix
tailproxy.url = "git+https://git.jolheiser.com/tailproxy.git";
# ...
imports = [inputs.tailproxy.nixosModules.default];
```

[Module](./module/default.nix):

```nix
{
  services.tailproxy = {
    "myapp" = {
      enable = true;
      hostname = "myapp";
      auth-key = "<one-time auth key>"; # https://login.tailscale.com/admin/settings/keys
      funnel = false;
      port = 1234;
    };
    "otherapp" = {
      # ...
    };
  };
}
```

## License

[MIT](LICENSE)