So I have setup talescale, by following The Ultimate Guide to Tailscale on Unraid by SpaceInvaderOne, and as far as I can tell I have it working as expected and demonstrated in the video.

The problem is that you need to install TailScale itself onto a device to be able to access the tailscale-net and your devices. For various reason I would really like a option that allows me to access services like say JellyFin or Netxcloud, not the server webUI, but the actual service itself, (in Jellyfin's case the ability to connect and stream), by simply using a normal url.

I did some reading and aparently there is a function for this called "TaleScale Funnel", which dose exactly what I am asking for.

The problem is I can't work out how to actuially do it. I can not find any tutorial on youtube that even mention this feature and all the other tutorials I found are way to advanced for me and I can not work out how to interpret these instructions and apply them to unraid. Also, the tailscale website seems to update often and none of the tutorials match the current tailscale UI, and I am finding it hard to really do anything.

I would really apreciet it if someone could teach me how to setup Tailscale Funnel on my tailscale-net. A link to a youtube tutorial for it would be awesome, but really anything that is specifically designed for unraid.

TL;DR :

Q1: How exactly do I set up a Tailscale Funnel for unraid using the unraid tailscale plugin. So I can acess services like streaming from Jellyfin or using Nextcloud with out the need to install the tailscale app on the connecting device.

Q2: is tailscale funnel even the thing to be using? Is there another way to do what I am trying to do using tailscale? (and not some sort of traditional reverse proxy)

Thanks!

Edited November 26, 2025Nov 26 by questionbot

Good questions, I don't know the answer, but I have a related question. What advantages does using Tailscale Funnel have vs opening up a port on your router? Many of us have done this in the past for stuff like Plex or Jellyfin - does it make sense to keep doing things that way or is Funnel more secure.

The primary benefit of using Tailscale Funnel in unRAID is the ability to publish a container’s website or web service to the public internet via a unique HTTPS URL, allowing anyone with the link to access it—even if they are not part of your Tailnet. This eliminates the need for port forwarding on your router or managing a custom domain name and DNS configuration, making remote access simple and secure. Unlike the "Serve" option, which restricts access to only devices within your Tailnet, Funnel enables broad accessibility without exposing your entire server to the internet. This is particularly useful for sharing services like Plex, Emby, or Jellyfin with friends or family without requiring them to install Tailscale or configure complex networking settings. However, this convenience comes with a security trade-off, as it exposes the service to the wider internet, so it should be used with caution and understand the security implications.

But if funnel more secure than forwarding ports? If so, how?