Comment on Replacing Cloudflare Tunnels with Tailscale?
lemmyvore@feddit.nl 11 months agoOnly if that nginx is advertising the .ts.net domain, and using the certificates for the .ts.net domain, which means you have to export and renew them manually via tailscale cert. If you let Tailscale manage them you will have a TLS gap.
ck_@discuss.tchncs.de 11 months ago
Precisely. Except there is no “Tailscale manage them for you”.
So you could summarize your answer as " Tailscale certificates work like let encrypt".