I built my own RSS reader. FastAPI, SQLite, Docker, Caddy ā deployed via a single bootstrap script, served exclusively over Tailscale.
No open ports, no public exposure, proper TLS.
I built my own RSS reader. FastAPI, SQLite, Docker, Caddy ā deployed via a single bootstrap script, served exclusively over Tailscale.
No open ports, no public exposure, proper TLS.
š³ almeidapaulopt/tsdproxy
Spins up Tailscale instances for Docker containers based on labels, serving traffic with automatic HTTPS and eliminating the need for sidecars
ā Stars: 1621
š
Last Update: Jun 20, 2026
https://github.com/almeidapaulopt/tsdproxy
#selfhosted #homelab #selfhost #selfhosting #opensource #docker #tailscale
Packed for #roadtrip to Kyiv. I like road trips.
Also connected my #homelab to the biggest charging station I have. Should be enough for up to 20 hours without power.
#Tailscale checked. #WakeOnLan checked. Everything should be fine.
Oh wait, it wont work when the main device ā a MacBook ā is inactive⦠Should I install it on the NAS instead?
Setup is NAS > MacBook > iPad
Wahey, got #Tailscale running on an old iPad Air!
Instructions for the n00b in your life > https://www.xda-developers.com/i-couldnt-get-jellyfin-remote-streaming-working-until-i-found-this-app/
Hit a little snag when I wanted to route my mastodon traffic from my new dockerised instance through a Tailscale/Headscale exit node, as tailscale dropped all traffic to my containers.
Wrote a quick note on how I fixed this:
https://blog.thms.uk/2026/06/docker-tailscale-exit-node?utm_source=mastodon
Question for #tailscale and/or #docker folks from an extremely new user of both on my home NASā¦
How do I get one docker container to access `https://*.*.ts.net` URLs served by another?
I have one container serving Forgejo, works great! But my Renovate container will only resolve the local or Tailscale IP, not the fancy MagicDNS URL. (Which would be fine if it never needed to follow nicer URLs returned by the Forgejo API.)
Setting the containerās network to that of the Forgejo Tailscale server enables access to the serverās port, but not the nice URL. š¤·
**Update:** Solved! https://social.lol/@tylersticka/116767952316840680
Figured it out! š Needed to add Tailscale's MagicDNS to the server config: https://github.com/tailscale/tailscale/issues/14467#issuecomment-3715457739
Hackers Exploit Tailscale for Persistent Access After C2 Takedown
Meet Poisson, a French-speaking hacker who left a digital trail of 339 commands over 33 days, revealing a clever exploit that allowed them to maintain persistent access to a small French automotive business even after a C2 takedown. The intruder's step-by-step playbook was surprisingly left in an open storage bucket, giving Catoā¦
#Tailscale #SshExploitation #PersistentAccess #CatoNetworks #HavocsDemon
I use a Google remote desktop from Seattle Washington to use my PC at my mom's house in Texas City, TX #VerizonHome5G
Which in turn uses #TailScale to deliver the SCYTHE at https://neurosphere-2.tail52f848.ts.net/wordpress
Check out "Chrome Remote Desktop"
https://play.google.com/store/apps/details?id=com.google.chromeremotedesktop