Hi fellows. First up: Great job with the plugin and many thanks 🙏. Keep up the good work. 🤜
I have one issue with it, that bothers me now for days and I can't seem to get a fix for it: I have a public domain (*.tail.example.com) pointing to my Tailscale-FQDN of my unRAID server. On the unRAID machine I have an Nginx Proxy Manager container running, which passes the different subdomains to the services (e.g. photos.tail.example.com to Immich, etc.). This works like a charm from every device on my Tailscale network.
Now I wanted to add Authentik for SSO to the services, which was not a problem in the first place. The thing that is not working is the containers (on a bridge-network) are not able to reach the subdomains. For example I have a domain auth.tail.example.com that points to the Authentik container. The authentication-route must reach the domain to be able to create a token.
I nailed it down to the problem that the host system (unRAID) is not resolving the domain completely. When I run
dig auth.tail.example.com
it yields the FQDN of the unraid node as the answer, but not the actual Tailscale-IP, which it should. So I guess there is something wrong with the DNS-resolution, especially the resolution being not done to the end.
I have set the DNS-Servers on unRAID to 100.100.100.100 and 192.168.188.10 (PiHole running on unRAID on br0 with fixed IP).
Here are my Tailscale-plugin-settings:
Does anybody of you guys have had similar issues or any advice for me of how I can fix this issue?
Thanks in advance.