Reading up on Tailscale

Another cloud provider down. ❌ Tailscale ✅ Headscale Now my company and products run on my self-hosted, private VPN.

@SimonHoiberg

If you wanna do it yourself, this is how: Buy (~15 min) 1. Cheap VPS from Hetzner or DigitalOcean (~€5-10/mo), Ubuntu 24.04, tick automatic backups at checkout 2. Add your domain to Cloudflare (free plan), switch nameservers at your registrar 3. Install Termius (SSH app) + Tailscale (private network) on laptop and phone, free tiers Lock it down (~20 min) 4. Generate an SSH key in Termius, add it to the VPS at creation. Keys only, never passwords 5. SSH in once via public IP, run updates, install Tailscale on the server, log it in 6. Disable Tailscale key expiry for the server (admin console, one click) 7. Verify you can SSH via the server's Tailscale 100.x address BEFORE the next step 8. Provider firewall: delete all inbound rules, allow only port 443 from Cloudflare's published IP ranges. No public SSH at all. You enter through the tunnel 9. Test from outside: public IP times out on everything, Tailscale IP connects. Server is now invisible 10. One SSH key per device. Phone gets its own key added to authorized_keys Install the brain (~5 min) 11. apt install tmux then install Claude Code (official native installer, one curl command) 12. Run Claude Code inside a tmux session so it survives disconnects and keeps working while your laptop is closed Hand over everything else 13. Write ONE long handover prompt telling Claude Code: the server facts, the security model (so it doesn't "fix" it), folder conventions (/srv/http/domain per project, one tmux session each), your preferences, and standing rules (confirm before destructive actions, new services bind to localhost/Tailscale only) 14. Make it write all of that into CLAUDE.md first, so every future session already knows everything 15. Backups before features: nightly job pushing your data to GitHub, tested, before a single page exists 16. Then let it install the web server (Caddy + Cloudflare DNS plugin plays nicest with the locked firewall), set up SQLite, deploy the first page From then on you never administer the server again. You open Termius from anywhere, on any device, and just say what you want. BOSH

@robj3d3

For everyone just getting on herdr. Wait till you use via termius/tailscale I've been using it for 2 weeks now. Super impress and it's made it much easier to maneuver. Detach and come back: Press prefix+q or simply close your terminal window. The Herdr server and every agent keep running. Run herdr again to reattach to the same session. To actually end the session and stop its panes: herdr server stop

@aijoey

The GL.iNet Comet Pro is amazing. So easy to plug on a desktop computer to control it remotely, and it comes with Tailscale support out of the box. Super fast, super fluid. Incredible for remote AI boxes and OS testing. Even has image mounting built in! https://www.amazon.com/GL-iNet-GL-RM10-Passthrough-Touchscreen-Tailscale/dp/B0G1BS7WWK/

@dhh

A few months ago my kids started vibecoding little web games with Cursor and wanted their friends to play them. GitHub Pages was fine until the games needed real backends, so I hacked together a setup where each game was a folder in one repo that deployed to a Hetzner box on every push. That held up until we shipped FULL SEND for Vibe Jam 2026 and it took off with 38,000+ players. The duct tape needed to become something real, so I rebuilt it properly and pulled it out into its own project. It turns one Linux server into a push-to-deploy host for many apps. The whole thing is a single Go binary that installs and drives Docker, Kamal, Cloudflare, Tailscale, and GitHub for you. After that: - Each app is a GitHub repo. - A git push is live in <5 seconds. - Deploys are zero-downtime. - Each app runs in its own container. - Automatic Cloudflare DNS and TLS tunnels. - SQLite-aware backup and restore. It's deliberately single server using convention over configuration, so for a typical app there's no YAML or Dockerfile to write. The idea is that one decent VPS can reliably run all your projects without per-app bills or piles of infra config. It's built on top of Kamal, so it's basically a Kamal wrapper for the "lots of apps on one server" case, with the Cloudflare, Tailscale, DNS, and backup glue wired up by convention. Setup is one interactive command on a fresh Linux box, which walks you through connecting everything. If you also have a bunch of projects you want to run on a single server, tell your Claude Code, Codex, Cursor, or favorite AI agent to grab a VPS and try it for you. It's fully open source and you can customize it to your liking:

@dvassallo

So @loaibassam asked me my stack recently, I replied: FREE: Nginx web server on Ubuntu (free) Auto upgrade with unattended-upgrade (free) Scheduled workers with Cron (free) Vanilla PHP for site backend (free) Vanilla CSS (free) Vanilla JS for code (free) Game servers I do in vanilla Node JS (free) SQLite for DB (free) Python for tool scripts (free) Cloudflare with Cloudflare tunnel for DNS/SSL (free) Tailscale for security (free) OpenFreeMap for maps (free) CHEAP: xAI for AI API (cheap) Stripe for payments (cheap) Cloudflare R2 for image storage (cheap) Hetzner VPS ($4/mo) Cloudflare domain reg (~$10/year) So about ~$5/mo total costs with about ~5M unique visitors per month per site (these are site averages)

@levelsio

"I moved off Tailscale"

@megaconfidence

This guy made a great YouTube video about setting up OpenClaw securely. He goes through Tailscale, setting up a firewall, etc.https://t.co/LlNTvLPEJa pic.twitter.com/jXLw6oEKf1

@RabehBoudiaAI

Shout out to the 🐐@skeptrune for the guideI’ve tried cursor remote agents, running coding agents in sandboxes, and this is far and away the best & easiest setup I’ve used so farOnly took ~10 minutes to setup https://t.co/9bLkr2Tc7E

@RhysSullivan