How to set up Tailscale

Zero-config mesh VPN. This guide covers how to access it, log in for the first time, configure the basics, and where its data lives so you can back it up.

1. What is Tailscale?

Access all your SparkBox services from anywhere without port forwarding, dynamic DNS, or firewall rules. Tailscale creates a secure mesh network between your devices using WireGuard under the hood. Share access with family or friends by sharing nodes on your tailnet.

2. Before you start

Two one-time setup steps in your Tailscale admin console before this works: (1) at https://login.tailscale.com/admin/settings/features enable BOTH 'HTTPS Certificates' and 'Tailscale Serve' — without these the module starts but the off-LAN dashboard URL returns nothing. (2) Generate an auth key at https://login.tailscale.com/admin/settings/keys (reusable, 90 days). Full walkthrough at https://tomsparkbox.com/docs.html#remote-access-tailscale

3. Settings you can change

You can set these when you enable the module, or later from Apps → Tailscale in the dashboard:

• Tailscale Auth Key — Paste your Tailscale auth key here (starts with 'tskey-auth-'). Get one at https://login.tailscale.com/admin/settings/keys — use a reusable key if you want the container to reconnect automatically after restarts. NOTE: also make sure 'HTTPS Certificates' and 'Tailscale Serve' are both enabled at login.tailscale.com/admin/settings/features — otherwise the module installs but remote access silently won't work.

4. Where your data lives

Tailscale's config and persistent data are stored on the SparkBox host under:

/opt/sparkbox/modules/tailscale/config/

Backups via the SparkBox dashboard's Backup tile include this directory by default, so a single restore brings Tailscale back to its current state on a fresh install.

Next steps