tailscale-homelab

What problem does it solve?

It helps you reliably reach and operate homelab hosts across multiple sites using Tailscale, even when DNS, routing paths, or SSH keys behave differently between primary and backup connectivity.

Core Features & Use Cases

• One-alias homelab access: Uses SSH aliases aligned to the host inventory so you can run container and file operations on the main Unraid server without knowing the current network path.
• Subnet and site-to-site conventions: Explains the dual LAN alias pattern (10.0.X.Y and 10.68.X.Y) for primary vs backup IPsec tunnels, plus Tailscale subnet router behavior and required IP forwarding.
• Tailscale diagnostics that match reality: Provides a practical, ordered failure-mode checklist (especially for WSL2) that starts with SSH liveness and then validates tailnet IP resolution, MagicDNS, and key offering.
• Exit-node and ACL correctness: Covers how via: grants and subnet-route approvals affect connectivity, so debugging focuses on the right control-plane constraints.

Quick Start

Tell the assistant to help you SSH to the homelab host alias and provide the next diagnostic step if SSH fails, using the failure-mode order documented for WSL2.