Tailscale connect to containers protected by gluetun #2668
Unanswered
ExcaliburVT
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
I commonly have my docker containers set up with Tailscale so that I am able to access the container pages through my tailnet.
https://tailscale.com/kb/1282/docker
For instance, I am able to connect to sonarr using my tailnet https:// url and it makes everything nice and secure as well has HTTPS.
---break
I also have set up several containers with gluetun, and I am able to access their container pages by adding their ports to the gluetun ports list. This makes those pages only accessible on my local network and doesn't let me use the Tailscale https setup.
Is it possible to add one (or more) Tailscale containers to the gluetun network in a way that I get the best of both worlds? The main thing is to ensure that the security of gluetun outbound is not compromised. The connection from the Tailnet should only be inbound, and I am not trying to do anything with an exit node in this scenario.
The main problem I'm facing is that the docker setup for both gluetun and tailscale requires the "app" containers to use network_mode of service like:
network_mode: "service:gluetun"
Thanks in advance!
Beta Was this translation helpful? Give feedback.
All reactions