Reading up on Tailscale
21 deep · digging since nov 27, 25
- A Practical Guide to SSH Tunnels: Local and Remote Port Forwarding
This piece explains SSH local and remote port forwarding with practical examples and a visual cheat sheet for accessing private network services.
- Iroh 1.0 | Hacker News
Iroh 1.0 is a library enabling apps to establish direct peer-to-peer connections via relays, removing dependency on external VPN accounts or infrastructure.
- I am building a cloud
exe.dev, co-founded by a Tailscale founder, offers SSH-accessible VMs for $20/month, aiming to simplify cloud infrastructure for AI agents.
- Show HN: I put an AI agent on a $7/month VPS with IRC as its transport layer
A developer built a two-tier AI agent on a $7/month VPS using IRC as transport, enabling visitors to ask about his work with real code access instead of rephrased resume text.
- I vibe coded my dream macOS presentation app
Simon Willison describes creating a custom macOS presentation app using AI-assisted vibe coding in Swift, which sequences URLs as slides and includes a phone-based remote control via Tailscale.
- Tailscale Peer Relays is now generally available
Tailscale's Peer Relays feature is now generally available, enabling any node in a tailnet to act as a relay to improve performance and reduce reliance on centralized DERP servers.
- You Should Be Using Tailscale - YouTube
This video promotes Tailscale as a secure networking tool, demonstrating its use with the Zed editor, DNS settings, and the Openclaw project for developers.
- Moltbook is the most interesting place on the internet right now
Moltbook is a social network for AI agents built on OpenClaw, showcasing both useful automation and severe security risks from prompt injection.
- GitHub - gbasin/agentboard: Web wrapper around tmux optimized to multiplex AI agent TUIs, special support for iOS safari and mac w/ keyboard shortcuts
Agentboard offers a web GUI for tmux tailored to AI agent sessions, enabling shared workspaces across devices with mobile and desktop support.
- CLI agents make self-hosting on a home server easier and fun
CLI agents like Claude Code and Tailscale dramatically lower the barrier to self-hosting, making it more accessible and fun for developers.
- Show HN: Tailsnitch – A security auditor for Tailscale
Tailsnitch audits Tailscale configurations for 50+ misconfigurations and security violations, offering CLI-based scanning, fix mode, and SOC 2 evidence export.
- Tailscale state file encryption no longer enabled by default
Tailscale reversed its 1.90.2 decision, disabling state file encryption and hardware attestation keys by default due to unreliable TPM implementations causing support and breakage issues across heterogeneous devices.
- Claude Code On-the-Go
Developers share setups for running Claude Code on mobile via Tailscale and SSH to enable coding on the go.
- Claude Code On-The-Go - granda
A developer runs six parallel Claude Code agents from an iPhone using a disposable Vultr VM, Tailscale VPN, and push notifications via Poke.
- Tailscale | Secure Connectivity for AI, IoT & Multi-Cloud
Tailscale offers a zero-trust identity-based connectivity platform that replaces legacy VPNs for remote teams, multi-cloud, IoT, and AI workloads.
- Let's put Tailscale on a jailbroken Kindle
Tailscale details how to set up its VPN on a jailbroken Kindle for easier SSH access, file transfer via Taildrop, and integration with KOReader.
Takes
A few months ago my kids started vibecoding little web games with Cursor and wanted their friends to play them. GitHub Pages was fine until the games needed real backends, so I hacked together a setup where each game was a folder in one repo that deployed to a Hetzner box on every push. That held up until we shipped FULL SEND for Vibe Jam 2026 and it took off with 38,000+ players. The duct tape needed to become something real, so I rebuilt it properly and pulled it out into its own project. It turns one Linux server into a push-to-deploy host for many apps. The whole thing is a single Go binary that installs and drives Docker, Kamal, Cloudflare, Tailscale, and GitHub for you. After that: - Each app is a GitHub repo. - A git push is live in <5 seconds. - Deploys are zero-downtime. - Each app runs in its own container. - Automatic Cloudflare DNS and TLS tunnels. - SQLite-aware backup and restore. It's deliberately single server using convention over configuration, so for a typical app there's no YAML or Dockerfile to write. The idea is that one decent VPS can reliably run all your projects without per-app bills or piles of infra config. It's built on top of Kamal, so it's basically a Kamal wrapper for the "lots of apps on one server" case, with the Cloudflare, Tailscale, DNS, and backup glue wired up by convention. Setup is one interactive command on a fresh Linux box, which walks you through connecting everything. If you also have a bunch of projects you want to run on a single server, tell your Claude Code, Codex, Cursor, or favorite AI agent to grab a VPS and try it for you. It's fully open source and you can customize it to your liking:
@dvassallo
So @loaibassam asked me my stack recently, I replied: FREE: Nginx web server on Ubuntu (free) Auto upgrade with unattended-upgrade (free) Scheduled workers with Cron (free) Vanilla PHP for site backend (free) Vanilla CSS (free) Vanilla JS for code (free) Game servers I do in vanilla Node JS (free) SQLite for DB (free) Python for tool scripts (free) Cloudflare with Cloudflare tunnel for DNS/SSL (free) Tailscale for security (free) OpenFreeMap for maps (free) CHEAP: xAI for AI API (cheap) Stripe for payments (cheap) Cloudflare R2 for image storage (cheap) Hetzner VPS ($4/mo) Cloudflare domain reg (~$10/year) So about ~$5/mo total costs with about ~5M unique visitors per month per site (these are site averages)
@levelsio
"I moved off Tailscale"
@megaconfidence
This guy made a great YouTube video about setting up OpenClaw securely. He goes through Tailscale, setting up a firewall, etc.https://t.co/LlNTvLPEJa pic.twitter.com/jXLw6oEKf1
@RabehBoudiaAI
Shout out to the 🐐@skeptrune for the guideI’ve tried cursor remote agents, running coding agents in sandboxes, and this is far and away the best & easiest setup I’ve used so farOnly took ~10 minutes to setup https://t.co/9bLkr2Tc7E
@RhysSullivan