16 minutes ago, nebb00 said:

Is it possible to have this plugin forward any requests *.domain.com to my SWAG container on 192.168.40.3

 

IMO, you'd handle that with overrides/hosts list on a DNS resolver like Unbound.

 

 

Edited December 23, 20241 yr by Espressomatic

4 minutes ago, Espressomatic said:

 

IMO, you'd handle that with overrides/hosts list on a DNS resolver like Unbound.

 

 

ok, i installed the plugin, advertised with and approved.

tailscale set --advertise-routes=192.168.40.3/32

although have no idea what to do now. Should services on tailscale populate with docker containers?

I use a custom docker network eth0.40 on vlan 40, seperate from unraid mgmt on vlan 1. How do I get other tailscale devices to connect to my SWAG docker container on 192.168.40.3

You likely shouldn't be using route advertising in Tailscale. And not to advertise a single IP like that.

 

Your DNS & Unbound need to be set up to support your VLANs, which should all be working before you do anything with Tailscale. In the end, Tailscale gives you access to your network from outside, but isn't what makes your LAN setup work in the first place.

Hi! I'm having some issues reaching my GUI via the tailscale URL. It loads fine with my .local address. And all of my dockers are accessible via tailscale. I'm on unraid 7.0rc2. I'm pretty new to this stuff. Didn't make any changes, it just stopped working. The only thing I tried doing to maybe fix the problem was changing the https port in Unraid's management access settings, and then changed it back. I've tried googling but was unable to find someone with exactly the same problem. Would appreciate any help/happy to clarify anything if needed. 

 

blockbuster-diagnostics-20241223-2337.zip Blockbuster-tailscale-diag-20241223-234613.zip

10 hours ago, mkahane said:

I'm having some issues reaching my GUI via the tailscale URL.

 

What's this Tailscale URL? Are you referring to using machinename.tailnetname.net?

 

You have to be using Tailscale's DNS and have MagicDNS turned on. Is that the case in your configuration?

 

 

19 minutes ago, Espressomatic said:

 

What's this Tailscale URL? Are you referring to using machinename.tailnetname.net?

 

You have to be using Tailscale's DNS and have MagicDNS turned on. Is that the case in your configuration?

 

 

Yes, and it was working fine for the first week. And all of my dockers using Tailscale serve are still accessible via the machinename.tailnetname.net

A couple more things to check...

 

In Network settings, is the Tailscale interface added/included in the Interface Extras section?

 

 

And at the bottom of the Management Access page, is Tailscale listed there with its certificate path?

 

 

And lastly, below that in the Unraid Connect section, under Extra Origins, is the tailscale address included?

 

 

These are the items that immediately came to mind for this issue - just in case.  I'm pretty sure this last one isn't significant for this issue - at least not when connecting from the LAN.

 

 Do make sure "Use Tailscale DNS settings" is turned ON. "Use Tailscale Subnets" should probably be OFF for your testing.

 

 

And also make sure you using the correct (and current) tailnet name. For instance, I had the one above recorded (the lobster snake) but when I went to go look at my Tailscale Admin page, realized that I'd changed it a while back. Connections with all above settings work as expected to the Unraid machines on my network.

 

 

 

Edited December 24, 20241 yr by Espressomatic

Hello, I am running 7.0.0-rc.2 withthe official actualbudget/actual-server Docker image. There I am trying to enable Tailscale, however I am encountering the following error.

 

Checking if there are any migrations to run for direction "up"...
Migrations: DONE
Listening on :::5006...
=======================

Executing Unraid Docker Hook for Tailscale

Detecting Package Manager...
Detected Advanced Package Tool!
Installing packages...
Please wait...
Packages installed!
Tailscale not found, downloading...
Please wait...
ERROR: Can't get Tailscale JSON
ERROR: Unraid Docker Hook script throw an error!
       Starting container without Tailscale!

Starting container...

 

I have set up two other Docker containers using Tailscale where I didn't encounter any issues.

 

Any ideas what could be done to resolve this?

 

 

13 minutes ago, Hercules said:

Hello, I am running 7.0.0-rc.2 withthe official actualbudget/actual-server Docker image. There I am trying to enable Tailscale, however I am encountering the following error.

 

Checking if there are any migrations to run for direction "up"...
Migrations: DONE
Listening on :::5006...
=======================

Executing Unraid Docker Hook for Tailscale

Detecting Package Manager...
Detected Advanced Package Tool!
Installing packages...
Please wait...
Packages installed!
Tailscale not found, downloading...
Please wait...
ERROR: Can't get Tailscale JSON
ERROR: Unraid Docker Hook script throw an error!
       Starting container without Tailscale!

Starting container...

 

I have set up two other Docker containers using Tailscale where I didn't encounter any issues.

 

Any ideas what could be done to resolve this?

 

 

This is not an issue with the Tailscale plugin, please make a post in the pre releases forum:

 

https://forums.unraid.net/bug-reports/prereleases/

9 hours ago, Hercules said:

Hello, I am running 7.0.0-rc.2 withthe official actualbudget/actual-server Docker image. There I am trying to enable Tailscale, however I am encountering the following error.

 

Checking if there are any migrations to run for direction "up"...
Migrations: DONE
Listening on :::5006...
=======================

Executing Unraid Docker Hook for Tailscale

Detecting Package Manager...
Detected Advanced Package Tool!
Installing packages...
Please wait...
Packages installed!
Tailscale not found, downloading...
Please wait...
ERROR: Can't get Tailscale JSON
ERROR: Unraid Docker Hook script throw an error!
       Starting container without Tailscale!

Starting container...

 

I have set up two other Docker containers using Tailscale where I didn't encounter any issues.

 

Any ideas what could be done to resolve this?

 

 

Having the exact same issue in 7.0.0-rc.2

3 minutes ago, syed said:

Having the exact same issue in 7.0.0-rc.2

This is not an issue with the Tailscale plugin, please make a post in the pre releases forum:

 

https://forums.unraid.net/bug-reports/prereleases/

Hi folks,

 

First off, great job on this plugin! It works great for letting me connect to all of my docker containers securely from all of my devices. It works great for almost every use case.

 

I'm having trouble accessing one thing through Tailscale though - my Unraid webGUI dashboard. When I try to access it via the device's magicDNS device name or its Tailscale IP address, I get a ERR_CONNECTION_TIMED_OUT error.

 

I've already tried the steps in the first/pinned post about disabling subnets (they were already disabled). I've also done some research and tried a few other things, such as ensuring that tailscale1 is included under "Include listening interfaces" in Network settings.

 

I've generated plugin diagnostics, please find them attached to my post. I'd appreciate any help you can offer to figure this out. Thank you!

 

 

unraid-server-tailscale-diag-20241229-014837.zip

Go to Settings -> Management Access and scroll down to the Local Access URLs section - take a look at the URLs Unraid says you can connect on.

 

Example:

 

 

You should see one listed for Tailscale like so:

 

 

Confirm if those digits match the TS IP you're trying.

 

In my case, if I grab just the number and replace the dashes with dots to make an IP, my webUI works as expected - without a valid certificate of course.

 

This didn't take any special setup afaik.

 

 

Edited December 29, 20241 yr by Espressomatic

2 hours ago, Espressomatic said:

Go to Settings -> Management Access and scroll down to the Local Access URLs section - take a look at the URLs Unraid says you can connect on.

 

Example:

 

 

You should see one listed for Tailscale like so:

 

 

Confirm if those digits match the TS IP you're trying.

 

In my case, if I grab just the number and replace the dashes with dots to make an IP, my webUI works as expected - without a valid certificate of course.

 

This didn't take any special setup afaik.

 

 

Hi, thanks for your reply. The digits in the Tailscale URL do, in fact, match the Unraid IP for my unraid machine. If I try to enter that IP address in the address bar and navigate, I still get the connection timeout error I mentioned above. Same goes for the two Tailscale URLs on this management access settings page, both time out.

 

One thing I just noticed that might be relevant: I can enter my machine's local (non-tailscale) IP to hit the dashboard, but the URL will change in my address bar to one of my Local access URLs, specifically the one that looks like this: https://192-168-1-2.asdlfkj2l34kj23of9asdflasidfjalsdfkj.myunraid.net/.

 

It seems like it's auto-redirecting me to this URL, and I'm not sure what's doing that, or if it somehow interferes with loading the webGUI through Tailscale, but it seems plausible. Figured I'd bring it up.

Edited December 29, 20241 yr by Argus9

OK, that's important info.

 

 

This is the section above the URL listings in Management Access. It sounds like you have Strict set for "Use SSL/TLS" instead of "Yes" or "No" - is that the case?

 

Click on the Use SSL/TLS title to pop open some help/instructions and you'll see that the Strict setting will cause a redirect like you're seeing. Try changing the setting to Yes.

 

 

 

 

Edited December 30, 20241 yr by Espressomatic

15 minutes ago, Espressomatic said:

OK, that's important info.

 

 

This is the section above the URL listings in Management Access. It sounds like you have Strict set for "Use SSL/TLS" instead of "Yes" or "No" - is that the case?

 

Click on the Use SSL/TLS title to pop open some help/instructions and you'll see that the Strict setting will cause a redirect like you're seeing. Try changing the setting to Yes.

 

 

 

 

Sadly, changing this to "Yes" doesn't resolve the issue with accessing the webui through the Tailscale URLs. Hopefully this narrows things down though. I also tried restarting the Tailscale plugin after changing this setting to see if that would help. No dice.

Edited December 30, 20241 yr by Argus9

But it fixed the URL rewrite issue, right?

 

So now are we talking strictly Tailscale tailnet domain or also by Tailscale IP?

 

 

 

 

4 hours ago, Espressomatic said:

But it fixed the URL rewrite issue, right?

 

So now are we talking strictly Tailscale tailnet domain or also by Tailscale IP?

 

 

 

 

The problem still affects both the Tailscale domain and the Tailscale IP address. I'm still getting that ERR_CONNECTION_TIMED_OUT error in the browser.

From a terminal, nslookup your Unraid machine by IP, and check the server and address output displayed before the machine name. That'll show what DNS you're using - it sounds like the query isn't going to your Tailnet's DNS.

You'll see your router's address when it's not working, and 100.100.100.100 when it's using Tailscale and working.

 

 

Edited December 31, 20241 yr by Espressomatic

56 minutes ago, Espressomatic said:

From a terminal, nslookup your Unraid machine by IP, and check the server and address output displayed before the machine name. That'll show what DNS you're using - it sounds like the query isn't going to your Tailnet's DNS.

You'll see your router's address when it's not working, and 100.100.100.100 when it's using Tailscale and working.

 

 

It does seem to be going through Tailscale DNS (done from a Windows 11 machine in a Powershell terminal):

 

OK, then it seems your browser may have its own DNS settings that you need to disable. Example: Firefox's secure DNS defaults

 

1 hour ago, Espressomatic said:

OK, then it seems your browser may have its own DNS settings that you need to disable. Example: Firefox's secure DNS defaults

 

I don't think it's just my browser. I get the same timeout issue if I ping the unraid server in a terminal:

 

 

I've also tried this using other browsers on a Mac and the issue persists.

Hmmm..  How about trying the same tests from the terminal on your Unraid machine?  nslookup some machine and ping your Mac

 

 

1 hour ago, Espressomatic said:

Hmmm..  How about trying the same tests from the terminal on your Unraid machine?  nslookup some machine and ping your Mac

 

 

Looks like it's still timing out. It's the same case if I try to use nslookup on other devices on my tailnet.

 

So something seems to be putting the unraid server in a sort of "black box" where nothing goes in or out through the tailnet to or from it.

 

 

I can't think of anything concrete to offer.  But if you want to poke around, from Unraid terminal you can use the tailscale command to check status and ping directly using tailscale to see if there's a difference.