Quick Command Reference

# Install Tailscale
curl -fsSL https://tailscale.com/install.sh | sh

# Interactive authentication
sudo tailscale up

# Automated auth (pre-auth key)
sudo tailscale up --authkey=tskey-auth-xxxxx

# QR code for headless devices
sudo tailscale up --qr

# All nodes in the tailnet
tailscale status

# Your Tailscale IPs
tailscale ip -4
tailscale ip -6

# Check client version
tailscale version

# Connection path (direct vs DERP relay)
tailscale ping <hostname>

# Accept subnet routes
tailscale set --accept-routes=true

# Use MagicDNS
tailscale set --accept-dns=true

# Advertise local subnets
tailscale set --advertise-routes=192.168.1.0/24,172.17.0.0/16

# Become an exit node
tailscale set --advertise-exit-node

# Enable Tailscale SSH
tailscale set --ssh

# Use a specific exit node
tailscale set --exit-node=100.x.x.x

# Allow LAN access while using exit node
tailscale set --exit-node=<ip> --exit-node-allow-lan-access=true

# View current DNS configuration
tailscale dns status

# Resolve a hostname through Tailscale's DNS
tailscale dns query my-server

# Full MagicDNS resolution
dig my-server.your-tailnet.ts.net

# Internal reverse proxy (tailnet only)
tailscale serve --bg 3000

# Public reverse proxy (entire internet)
tailscale funnel --bg 3000

# Serve a specific path
tailscale serve --bg --set-path=/api 8080

# Serve TCP (e.g., RDP)
tailscale serve --tcp=3389 tcp://localhost:3389

# View current config
tailscale serve status

# Stop serving
tailscale serve --https=443 off

# Route table (advertised vs approved vs active)
tailscale debug routes

# Full topology dump
tailscale debug netmap > netmap.json

# DERP relay map
tailscale debug derp-map

# Raw WireGuard config
wg show tailscale0
wg show tailscale0 allowed-ips

# Kernel routing for tailscale interface
ip route show dev tailscale0

# Daemon logs (Linux)
journalctl -u tailscaled -n 50 -f

# Generate support bundle
tailscale bugreport

services:
  tailscale:
    image: tailscale/tailscale:latest
    hostname: my-container
    environment:
      - TS_AUTHKEY=tskey-auth-xxxxx
      - TS_STATE_DIR=/var/lib/tailscale
    volumes:
      - tailscale-state:/var/lib/tailscale
      - /dev/net/tun:/dev/net/tun
    cap_add:
      - NET_ADMIN
      - NET_RAW
    restart: unless-stopped

  web-app:
    image: nginx:alpine
    network_mode: service:tailscale
    depends_on:
      - tailscale

volumes:
  tailscale-state: