this post was submitted on 23 Jan 2026
41 points (97.7% liked)

Selfhosted

60210 readers
951 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
ayyy@sh.itjust.works
curbstickle@anarchist.nexus
curbstickle_lw@lemmy.world
41
New to Tailscale. Can I use it along with my own DNS and NPM to access my services externally using my existing internal custom domain? (lemmy.world)
submitted 5 months ago by chazwhiz@lemmy.world to c/selfhosted@lemmy.world
16 comments fedilink hide all child comments
 

I’ve not done much with external access in the past, but I’m playing with Tailscale and it’s pretty neat. Wondering if I can configure it to work like my local access does:

  1. I use Nginx Proxy Manager to set easy subdomains for my services, I.e. service.mydomain.com
  2. I use AdGuard Home and have a redirect for *.mydomain to that NPM
  3. This works great internally, which is all I’ve really used it for.
  4. I’ve got tailscale working and I can go externally to server.wackyname.ts.net:serviceport.
  5. what I’d like to do is have tailscale somehow use the same internal dns/npm info so when I’m on my tailnet service.mydomain.com still works.
  6. But no other external access, said subdomains do nothing off tailnet.
  7. Mydomain.com is an actual domain I own. General DNS is at Cloudflare right now (main domain was pointed at a hosted site previously, but that’s not needed anymore)

Any way to pull this off without a ton of complexity?

you are viewing a single comment's thread
view the rest of the comments
[–] stratself@lemdro.id 1 points 5 months ago* (last edited 5 months ago) (1 children)

Do a DNS rewrite at AGH, but instead of the LAN IP make it the Tailscale IP of your NPM machine. Then configure AGH's IP address as one of the global nameservers on your Tailscale admin panel

Delete all A/AAAA records on Cloudflare, only use it for registrar purposes and the occassional certs authentication.

[–] chazwhiz@lemmy.world 2 points 5 months ago (1 children)

Do a DNS rewrite at AGH, but instead of the LAN IP make it the Tailscale IP of your NPM machine

Wouldn't that prevent any devices that don't have tailscale from using it even locally?

[–] stratself@lemdro.id 2 points 5 months ago

Yes.

If you want to access your NPM stuff on both Tailscale and LAN, either:

  • Advertise a subnet route for your LAN range, configure Tailscale devices to use it, and use your LAN IP on the AGH rewrite, or
  • Split Horizon: Have your DNS respond with a Tailnet IP when it's queried from the Tailnet range, and respond with a LAN IP when queried from LAN. AGH cannot do this, but other software like Technitium can