Tailscale · Headscale · WireGuard
What it's for
A private encrypted network linking your devices to your server, without ever exposing it on the public internet.
Why it matters
Instead of opening ports (and getting attacked), Tailscale builds a WireGuard tunnel between your authorised devices only: your server has no public attack surface. Headscale is the self-hosted version, so you depend on no third party. WireGuard alone gives full control, at the cost of manual setup.
For whom & when
Every self-hoster. It’s the safe way to reach your Nextcloud or photos from outside.
Install & use
Install Tailscale on your server and on your phone/PC, connect them to the same account.
Your devices instantly see each other on a private network; reach your server at its Tailscale address.
- For zero dependency, replace the coordination server with self-hosted Headscale.