this post was submitted on 23 Jan 2026
38 points (97.5% liked)

Selfhosted

55101 readers
431 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

  7. No low-effort posts. This is subjective and will largely be determined by the community member reports.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

I’ve not done much with external access in the past, but I’m playing with Tailscale and it’s pretty neat. Wondering if I can configure it to work like my local access does:

  1. I use Nginx Proxy Manager to set easy subdomains for my services, I.e. service.mydomain.com
  2. I use AdGuard Home and have a redirect for *.mydomain to that NPM
  3. This works great internally, which is all I’ve really used it for.
  4. I’ve got tailscale working and I can go externally to server.wackyname.ts.net:serviceport.
  5. what I’d like to do is have tailscale somehow use the same internal dns/npm info so when I’m on my tailnet service.mydomain.com still works.
  6. But no other external access, said subdomains do nothing off tailnet.
  7. Mydomain.com is an actual domain I own. General DNS is at Cloudflare right now (main domain was pointed at a hosted site previously, but that’s not needed anymore)

Any way to pull this off without a ton of complexity?

you are viewing a single comment's thread
view the rest of the comments
[–] iamthetot@piefed.ca 2 points 4 days ago (2 children)

I'm not an expert, take this with a very big grain of salt.

But I think what you want here is for your home server tailscale to act as an exit node for your remote connection.

This will mean that your phone for example will route traffic through your home server, using its AdGuard DNS.

You can even set it up to conditionally use it as an exit mode, iirc.

[–] chazwhiz@lemmy.world 1 points 4 days ago* (last edited 4 days ago) (1 children)

Interesting. I saw the exit node feature but didn’t look into it closely. I’ll check it out. Thanks!

[–] dieTasse@feddit.org 1 points 4 days ago

Also use advertise-routes to get access to the network as opposed to just the node. Like e.g.

--advertise-routes=192.168.1.0/24