3 ms·
Using tailscale can solve this problem, and that's what I've opted to do since I was using tailscale already.
by SparkyMcUnicorn 3y ago
Using tailscale can solve this problem, and that's what I've opted to do since I was using tailscale already.
- CGamesPlay 3y agoA (potentially minor) problem with this use case for Tailscale is that we do actually want the forwarded services listening on localhost and not on a different IP address, because browsers treat these as secure contexts without having to fuss with https. I briefly checked the Tailscale userspace docs just now and it seems to expose a SOCKS proxy, meaning that we'd need an extra piece to listen on the desired localhost port and forward via Tailscale. [edit] Removed an incorrect assumption. Tailscale does not require CAP_NET_ADMIN in userspace mode.
- SparkyMcUnicorn 3y agoYou could also use MagicDNS with https[0], although that might not solve it the way you'd prefer. [0] https://tailscale.com/kb/1153/enabling-https https://tailscale.com/kb/1153/enabling-https