diff --git a/docs/user/access-your-dappnode/vpn/tailscale.md b/docs/user/access-your-dappnode/vpn/tailscale.md index 063280555..06c4be7e0 100644 --- a/docs/user/access-your-dappnode/vpn/tailscale.md +++ b/docs/user/access-your-dappnode/vpn/tailscale.md @@ -51,8 +51,12 @@ Once installed, Tailscale will run as as any other package on your Dappnode. In ### 3. Configure Tailscale to Connect to Dappnode Internal Networks +To ensure you can access your Dappnode's internal networks and services, you need to configure Tailscale to accept routes and set up custom DNS servers. There are two main steps to complete this configuration. Accepting advertised routes and adding custom nameservers (DNS). + #### a. Accept Advertised Routes from Your Dappnode +Dappnode advertises its internal networks through Tailscale, allowing you to access services like the Dappnode Admin UI and other packages. To ensure these routes are accepted: + 1. Go to your [Tailscale Machines Dashboard](https://login.tailscale.com/admin/machines).

@@ -72,22 +76,34 @@ Once installed, Tailscale will run as as any other package on your Dappnode. In

3. Fill the popup with: - - **Nameserver IP:** `172.33.1.2` - - Activate **"Restrict to domain"** switch. - - Set the domain as `dappnode`. - -4. Add another custom nameserver, this time with the following values: - **Nameserver IP:** `10.20.0.2` - - Activate **"Restrict to domain"** switch. - - Set the domain as `dappnode.private`. -The end result should look like this: +4. Click and activate the "Override DNS servers" switch. + +The end result should look like this, with two nameservers active:

- +

-That's it! You've successfully configured Tailscale to connect to your Dappnode. All that's left is to install Tailscale on the device you want to access your Dappnode from. +That's it! You've successfully configured Tailscale to connect to your Dappnode. All that's left is to install Tailscale on the device you want to access your Dappnode from. + +:::warning +If you were already connected to your Dappnode with Tailscale, you may need to disconnect and reconnect to apply the new DNS settings. +::: + +
+Advanced DNS configuration + +If you don't want to use the default Dappnode DNS server for everything, you can set up Dappnode's DNS server to only resolve Dappnode services. For this, you will need to add a custom DNS server for each dappnode service, restricted to a specific domain. + +The following screenshot shows a configuration that only uses Dappnode's DNS server for services under the `dappnode`, `dappnode.private` and `dyndns.dappnode` domains, while using the default Tailscale DNS server for everything else. + +

+ +

+ +
### 4. Connecting to Dappnode with Tailscale diff --git a/static/img/dnsconfig.png b/static/img/dnsconfig.png deleted file mode 100644 index 80d741374..000000000 Binary files a/static/img/dnsconfig.png and /dev/null differ diff --git a/static/img/tailscalednsadvanced.png b/static/img/tailscalednsadvanced.png new file mode 100644 index 000000000..7318903b3 Binary files /dev/null and b/static/img/tailscalednsadvanced.png differ diff --git a/static/img/tailscalednsconfignormal.png b/static/img/tailscalednsconfignormal.png new file mode 100644 index 000000000..e675c11ee Binary files /dev/null and b/static/img/tailscalednsconfignormal.png differ