OPERATIONS
Remote access & HTTPS
Reach your workspace beyond your local network.
Choose your connection
EveryOS works without Tailscale. For remote access, install and connect Tailscale separately on the server and client, or configure an HTTPS reverse proxy. A Tailscale address is reachable only from a client on the same tailnet, subject to network policies.
Enable Tailscale Serve
The simplest path is Settings → Security → HTTPS. The built-in action requires an administrator, a linked sudo-authorized Linux account and Tailscale HTTPS certificates. For a manual setup, the command below serves loopback over HTTPS; configure trustedProxies and publicOrigins as described in the source guide.
tailscale serve --bg --https=443 http://127.0.0.1:7470Understand network exposure
Tailscale Serve does not enable Funnel. Existing port 443 handlers or Funnel can block the built-in action. For proxy-only access, bind EveryOS to 127.0.0.1. Plain HTTP is unencrypted, and the installer never opens firewall ports or router forwarding.
Based on EveryOS v0.1.38
View source · tailscale.md