Skip to main content

🛡️ Tailscale on Unraid: Setup & Usage Guide

📌 What is Tailscale?​

Tailscale is a secure, peer-to-peer VPN that uses WireGuard under the hood. It makes connecting devices across different networks as simple as logging in with your identity provider.

🧰 Why Use Tailscale with Unraid?​

  • Remote access to Unraid’s web UI securely
  • Access your Unraid shares, containers, and services from anywhere
  • No need to expose ports or configure DDNS
  • Simple and fast setup

⚙️ Prerequisites​

  • Unraid 6.10 or later
  • A Tailscale account (Google, GitHub, Microsoft, etc.)
  • Internet access on the Unraid machine

📥 Step 1: Install the Tailscale Plugin​

  1. Open your Unraid Web UI

  2. Navigate to: Plugins > Install Plugin

  3. Paste the following plugin URL:

    https://raw.githubusercontent.com/bergware/dynamix/master/unraid/dynamix.tailscale.plg

  4. Click Install

✅ This installs the official Tailscale plugin maintained by the Unraid community.

🔑 Step 2: Authenticate Tailscale​

  1. After installation, go to the new Tailscale tab under Settings

  2. Click Start Tailscale

  3. You’ll see a prompt with a login URL, like:

    https://login.tailscale.com/a/abc123

  4. Copy and paste that URL into your browser and log in with your Tailscale account.

  5. Once authenticated, your Unraid machine will join your Tailscale network.

🌐 Step 3: Access Unraid Remotely​

After joining Tailscale:

  1. Go to https://tailscale.com/admin/machines

  2. Find your Unraid server's Tailscale IP address (e.g. 100.72.34.56)

  3. From any other Tailscale-connected device, access the Unraid Web UI using:

    http://100.x.x.x

💡 You can optionally give the device a human-friendly hostname on the Tailscale admin dashboard.

⚡ Optional: Enable MagicDNS​

To avoid using IP addresses:

  1. Go to the Tailscale admin dashboard > DNS

  2. Enable MagicDNS

  3. You can now access your Unraid machine via a name like:

    http://unraid-name.tailnet-yourname.ts.net

🧱 Firewall / Local Access Notes​

Tailscale manages its own firewall rules with iptables and NAT traversal. You usually don’t need to open ports on your router.

However, to allow local subnet routing or expose services to other Tailscale devices not on your LAN:

  • Enable "Allow LAN access" in the Tailscale settings on Unraid

  • In Tailscale admin panel:

    • Enable Subnet routing
    • Enable Exit Node if you'd like to use Unraid as a VPN exit

🛠 Useful Tailscale CLI Commands (via Terminal)​

SSH into Unraid or use the terminal:

tailscale status          # See connection status
tailscale ip              # Show your Tailscale IP
tailscale logout          # Log out of Tailscale
tailscale up --ssh        # Enable SSH access over Tailscale

♻️ Autostart Tailscale on Boot​

  1. Go to Settings > Tailscale
  2. Set Enable Tailscale on Startup to Yes
  3. Save and apply

📌 Final Notes​

  • You can install Tailscale on your phone, laptop, or another server to securely connect to Unraid from anywhere.
  • Use MagicDNS and device naming for cleaner access.
  • No need to expose Unraid to the open internet — stay secure and stealthy.

🧭 Resources​