tailproxy

A tiny reverse proxy to expose apps over Tailscale as their own application/service.

Config

• hostname: The tailscale hostname, i.e. "git" would let you use "http://git" assuming you have MagicDNC enabled
• auth-key: Tailscale/tsnet auth key for authenticating with Tailscale
• funnel: Whether to enable as a Tailscale funnel
• data-dir: The tsnet data directory, where things like authentication information/tsnet logs live (default is a .tailproxy dir created in the working directory)
• port: The port to proxy

Nix Usage

As a flake:

tailproxy.url = "git+https://git.jolheiser.com/tailroute.git";
# ...
imports = [inputs.tailproxy.nixosModules.default];

Module:

{
  services.tailproxy = {
    "myapp" = {
      enable = true;
      hostname = "myapp";
      auth-key = "<one-time auth key>"; # https://login.tailscale.com/admin/settings/keys
      funnel = false;
      port = 1234;
    };
    "otherapp" = {
      # ...
    };
  };
}