skills.rest
tankpkg
tankpkgOFFICIAL
Explore all skills by this author →
GitHub

@tank/tailscale-expert

Configure, administer, and troubleshoot Tailscale mesh VPN tailnets.

1|1|Updated Feb 20, 2026
Search Tags:#troubleshooting#tailscale#serve#tailnet#mesh-vpn#magicdns#subnet-routing
One-click install
npx skills add https://github.com/tankpkg/packages --skill tank-tailscale-expert
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: @tank/tailscale-expert
Source: https://github.com/tankpkg/packages/tree/main/skills/tailscale-expert
Command: npx skills add https://github.com/tankpkg/packages --skill tank-tailscale-expert

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps teams configure, secure, and debug Tailscale tailnets without piecing together scattered documentation. It reduces trial and error when devices cannot connect, routes are misconfigured, DNS breaks, or access policies block the wrong traffic.

Core Features & Use Cases

  • Device onboarding and lifecycle management for humans, servers, containers, and CI runners.
  • Policy design with groups, tags, grants, SSH rules, tests, and route approvals.
  • Networking and exposure workflows for subnet routers, exit nodes, MagicDNS, Serve, Funnel, Taildrop, Drive, Tailnet Lock, certificates, and integrations such as Docker, Kubernetes, Headscale, cloud-init, NAS, and tsnet.
  • Use case: troubleshoot relay-only connections, design least-privilege production access, or publish an internal service to tailnet users or the public internet.

Quick Start

Ask for a Tailscale plan or fix for your environment, including your device role, current symptoms, and the exact goal you want achieved.

Frequently Asked Questions about @tank/tailscale-expert

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I troubleshoot a Tailscale device stuck on relay-only connections?▼

Troubleshoot Tailscale relay-only connections by verifying MagicDNS resolution, checking DERP relay availability, and inspecting subnet routing configurations. Diagnose NAT traversal failures through CLI commands to restore direct peer-to-peer mesh VPN links.

What is the best way to write Tailscale access control policies for least-privilege?▼

Write Tailscale access control policies using HuJSON syntax to define groups, tags, and grants. Design least-privilege production access by structuring SSH rules, route approvals, and tests to restrict tailnet traffic precisely.

How do I expose an internal service using Tailscale Serve and Funnel?▼

Expose internal services using Tailscale Serve to publish endpoints to tailnet users, or configure Funnel to bridge them to the public internet. Manage certificates and service exposure workflows directly through the Tailscale CLI.

Can I use Tailscale subnet routing with Docker and Kubernetes containers?▼

Yes, Tailscale subnet routing integrates with Docker, Kubernetes, and CI runners for device onboarding. Configure subnet routers and manage the container lifecycle to establish mesh VPN connectivity across self-hosted and production environments.

Why does MagicDNS break when configuring Tailscale subnet routing?▼

MagicDNS breaks during subnet routing when custom DNS configurations conflict with tailnet resolution paths. Verify MagicDNS behavior, inspect access control policy grants, and ensure DNS nameservers are correctly pushed through the Tailscale CLI.

How do I secure a tailnet with Tailnet Lock and auth keys?▼

Secure a tailnet by deploying Tailnet Lock to restrict node enrollment and generating auth keys for automated device onboarding. Harden security by integrating Tailscale SSH and managing access keys for servers and CI runners.

Related Skills

Explore More Software Engineering Skills→
Arvo-AIArvo-AI
387

tailscale

Automate Tailscale device management, SSH access, auth keys, ACLs, and DNS.

Official
Advanced
DevattomDevattom

ci-fixer

Automates fixing CI/CD pipeline failures across GitHub Actions, Vercel, and Netlify.

Community
Advanced
statick88statick88
1

docker-compose

Define multi-container applications with Docker Compose and Kubernetes.

Community
Intermediate
plurigridplurigrid
60

tailscale-mesh

Manage Tailscale mesh VPN networking with CLI commands for status, SSH, and file transfer.

Official
Advanced