TrueNAS Tailscale Companion - a new tool for using Tailscale on TrueNAS

Hi all,

I’ve created a tool and docker image for adding TrueNAS to a Tailscale network.

https://github.com/dwurf/truenas-tailscale

It has some warts and limitiations, but unlike the official app, it:

  • automatically creates a node on your Tailnet for each App (if it has a web Portal) as well as the TrueNAS host itself.
  • configures TLS for each app using LetsEncrypt, so you don’t need to muck about with Nginx Proxy Manager or similar.

It’s early days so please try it out on a test system, report bugs, leave feedback or just tell me it’s a dumb idea (hopefully with a link to better alternatives!)

That sounds slick. Not sure if it’ll work with my Headscale setup, but sounds like a neat way to integrate Tailscale much better than simply “there’s an app for that.”

It won’t work with headscale right now, but I could add a parameter for setting an alternate login server if there’s interest

1 Like

Ah basically what the Tailscale addon from TrueCharts used to have hehe. (Technically still does but it’s Helm only now)

I’ve found that Tailscale with Host-Network (Userspace disable) on 24.10 hasn’t given me issues, aka all apps are available to their GUI using tailscaleIP:port.

But great addition nonetheless!

Please do. There is no official headscale app available for Truenas scale. I don’t think the official tailscale app supports headscale login.

Just installed this and it’s really great, exactly what I was looking for.
A similar app is TSDproxy, but I had a lot of trouble getting that to work on TrueNAS.
You might want to take a look at what they’re doing though, to get some ideas.
Would be really great if the next iteration could support setting up Exit Nodes and Funnels as well.

Any progress on this for use with headscale?

I had a go at headscale support but couldn’t get it working - I’ll have to talk to the headscale guys and see if they can help out otherwise I’m stuck

When using the tailscale apps currently on mobile or servers / desktop etc I just need to pass the flag for the different login server url. No other changes for authing