7eb8d756d1
Read all 62 source files (Dev: 37, Homelab: 22, Venture: 3, Reference: 0). Entity pages created (17): - Wiki/Reference: lovebug, jenny, sunnie, n8n, ob1, tailscale, authentik, traefik, cloudflare, obsidian, gitea, plant-based-southerner, claude-code, dispatch, docker - Wiki/Homelab: proxmox - Wiki/Dev: pbs-hub, herbydev Synthesis pages created (2): - Wiki/Homelab/homelab-ingress-stack — four-layer ingress model (Cloudflare + Traefik + Authentik + Tailscale); operational lessons from 10+ source files - Wiki/Dev/ai-memory-architecture — three memory layers (wiki + OB1 + Dispatch context); ingest paths; harness-vs-model design decision All 11 index pages rebuilt (Sources/Dev, Venture, Homelab, Reference, Sources root; Wiki/Dev, Venture, Homelab, Reference, Wiki root; vault root index.md). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2.0 KiB
2.0 KiB
| type | path | tags | created | updated | |||
|---|---|---|---|---|---|---|---|
| entity | Wiki/Reference |
|
2026-05-08 | 2026-05-08 |
Tailscale
What it is
Tailscale is the WireGuard-based mesh VPN connecting Travis's homelab machines, development workstations, and cloud services into a unified private network. It provides zero-config encrypted connectivity without port forwarding or public exposure, making it the foundation for secure internal service access across the homelab and PBS infrastructure.
Current state
Active mesh. Key usages:
- herbydev access — Tailscale enables VNC access to herbydev from anywhere
- OB1 access — OB1 (Supabase + pgvector) is Tailscale-only, no public endpoint
- Homelab MCP server — MCP access path includes Tailscale alongside Cloudflare Tunnel
- Traefik deployment — Tailscale listed as part of ingress topology (alongside Cloudflare Tunnel)
- Cross-service auth — Services that need inter-machine communication route over Tailscale
Where it lives
- Installed on: herbydev, Proxmox hosts, PBS Linode server (where applicable), OB1 host
- Management: Tailscale admin console (cloud-hosted)
- No self-hosted control plane (using Tailscale's hosted coordination server)
Related projects
- Sources/Dev/herbys-dev-setup — Tailscale VNC for herbydev
- Sources/Homelab/ob1-deployment — Tailscale-only OB1 access
- Sources/Homelab/homelab-mcp-server — MCP server access path
- Sources/Homelab/traefik-deployment — ingress topology includes Tailscale
- Wiki/Reference/cloudflare — complementary external access layer
- Wiki/Homelab/homelab-ingress-stack — synthesis
History
- Ongoing — Foundational mesh VPN for all homelab connectivity
- 2026 — OB1 deployment locked as Tailscale-only (no public endpoint per addendum)
- 2026 — MCP server deployment uses Tailscale + Cloudflare Tunnel for dual access