🔗 Tailscale: your own private network · Tailscale: เครือข่ายส่วนตัวของคุณเอง · Tailscale：你自己的私人网络

1 🧠 What Tailscale is · Tailscale คืออะไร · Tailscale 是什么

Words you will see · คำที่จะได้เจอ · 你会见到的词

What it costs · ราคา · 费用

2 ⬇️ Install it · ติดตั้ง · 安装

⌨️ TERMINAL · Linux, Raspberry Pi OS — install and log in

curl -fsSL https://tailscale.com/install.sh | sh
sudo tailscale up

3 👀 Look around · สำรวจดู · 四处看看

⌨️ TERMINAL · any system — read-only checks

tailscale status
tailscale ip
tailscale ping spark
tailscale netcheck
tailscale version

what it printed on our laptop (addresses shortened)

> tailscale status
100.95.62.45    laptop       you@  windows  -
100.105.80.100  spark        you@  linux    active; direct 192.168.10.104:55388
100.100.176.50  twenty       you@  linux    offline, last seen 42d ago

> tailscale ping spark
pong from spark (100.105.80.100) via [2405:9800:…]:34319 in 90ms

> tailscale netcheck
        * UDP: true
        * Nearest DERP: Singapore

4 🔌 Use another device · ใช้งานเครื่องอื่น · 使用另一台设备

⌨️ TERMINAL · from your laptop — reach apps on a device called spark

curl http://spark:11434/api/tags
ssh you@spark

Optional: Tailscale SSH · ไม่บังคับ: Tailscale SSH · 可选：Tailscale SSH

⌨️ TERMINAL · on the Linux device you want to log in to

sudo tailscale set --ssh

5 🌐 Share a web app: Serve and Funnel · แชร์เว็บแอป: Serve และ Funnel · 分享网页应用：Serve 和 Funnel

⌨️ TERMINAL · on the device where the app runs

tailscale serve --bg 3000
tailscale serve status
tailscale serve reset
tailscale funnel --bg 3000
tailscale funnel reset

tailscale serve status — a real one from our DGX Spark

# Funnel on:
#     - https://spark-wav2lip-1.taila00da8.ts.net

https://spark-wav2lip-1.taila00da8.ts.net (Funnel on)
|-- / proxy http://127.0.0.1:7861

6 ⚙️ Configure it · ตั้งค่า · 配置

set, not up · ใช้ set ไม่ใช่ up · 用 set，别用 up

Four settings worth knowing · การตั้งค่าสี่อย่างที่ควรรู้ · 值得知道的四个设置

⌨️ TERMINAL · on a Linux device that will be the exit node or subnet router

echo 'net.ipv4.ip_forward = 1' | sudo tee -a /etc/sysctl.d/99-tailscale.conf
echo 'net.ipv6.conf.all.forwarding = 1' | sudo tee -a /etc/sysctl.d/99-tailscale.conf
sudo sysctl -p /etc/sysctl.d/99-tailscale.conf
sudo tailscale set --advertise-exit-node
sudo tailscale set --advertise-routes=192.168.10.0/24

Access rules: who can reach what · กฎการเข้าถึง: ใครเข้าถึงอะไรได้ · 访问规则：谁能访问什么

✏️ CHANGE · admin console → Access controls — a small policy for a class

{
  // Only the teacher may put the server tag on a machine.
  "tagOwners": {
    "tag:server": ["teacher@example.com"],
  },
  "grants": [
    // Everyone may use the class server's web apps.
    {"src": ["autogroup:member"], "dst": ["tag:server"], "ip": ["tcp:443", "tcp:11434"]},
    // The teacher may reach everything.
    {"src": ["teacher@example.com"], "dst": ["*"], "ip": ["*"]},
  ],
}

Servers with no screen: auth keys · เซิร์ฟเวอร์ที่ไม่มีหน้าจอ: auth key · 没有屏幕的服务器：auth key

⌨️ TERMINAL · on the server — join with a key instead of a browser

sudo tailscale up --auth-key=tskey-auth-XXXXXXXXXXXX --hostname=class-server

7 🐳 Tailscale in Docker · Tailscale ใน Docker · Docker 里的 Tailscale

📄 NEW FILE · docker-compose.yml — in your app's folder

services:
  app:
    image: nginx:alpine                 # your app; this one listens on port 80

  app-tailscale:
    image: tailscale/tailscale:latest
    environment:
      TS_AUTHKEY: ${TS_AUTHKEY}         # put the key in a .env file, never in this file
      TS_HOSTNAME: myapp
      TS_STATE_DIR: /var/lib/tailscale
      TS_USERSPACE: "true"
      TS_ACCEPT_DNS: "false"
      TS_SERVE_CONFIG: /config/serve.json
    volumes:
      - ts-state:/var/lib/tailscale
      - ./serve.json:/config/serve.json:ro
    restart: unless-stopped

volumes:
  ts-state:

📄 NEW FILE · serve.json — next to docker-compose.yml

{
  "TCP": { "443": { "HTTPS": true } },
  "Web": {
    "${TS_CERT_DOMAIN}:443": {
      "Handlers": { "/": { "Proxy": "http://app:80" } }
    }
  }
}

8 🩺 When it does not work · เมื่อใช้งานไม่ได้ · 用不了的时候

9 🧹 Remove a device, or leave · ลบอุปกรณ์ หรือเลิกใช้ · 移除设备或退出

⌨️ TERMINAL · on the device

tailscale down
tailscale up
tailscale logout