tailproxy

A tiny reverse proxy to expose apps over Tailscale as their own application/service.

Config

• hostname: The tailscale hostname, i.e. "git" would let you use "http://git" assuming you have MagicDNC enabled
• auth-key: Tailscale/tsnet auth key for authenticating with Tailscale
• auth-key-file: Path to a file containing a Tailscale/tsnet auth key for authenticating with Tailscale
• funnel: Whether to enable as a Tailscale funnel
• data-dir: The tsnet data directory, where things like authentication information/tsnet logs live (default is a .tailproxy dir created in the working directory)
• port: The port to proxy

schema.cue contains the source of truth for configuration.

Nix Usage

As a flake:

tailproxy.url = "git+https://git.jolheiser.com/tailroute.git";
# ...
imports = [inputs.tailproxy.nixosModules.default];

Module:

{
  services.tailproxy = {
    "myapp" = {
      enable = true;
      settings = {
        hostname = "myapp";
        auth-key = "<one-time auth key>"; # https://login.tailscale.com/admin/settings/keys
        funnel = false;
        port = 1234; # The port "myapp" is running on
      };
    };
    "otherapp" = {
      # ...
    };
  };
}