can I funnel more than one service at a time using tailscale?

Submitted ⁨⁨4⁩ ⁨weeks⁩ ago⁩ by ⁨Blxter@lemmy.zip⁩ to ⁨selfhosted@lemmy.world⁩

I would like to be able to give people an URL and have them be able to access my service.

Example I have overseerr currently funneled so when the go to url pcname.tail$$$$$.ts.net they are greeted with overseerr. But if I funneled another service at pcname.tail$$$$$.ts.net/immich for example it does nothing just blank loading but the url knows it should be Immich or another service (I can put the url pcname.tail$$$$$.ts.net/immich in the immich app and have it work). I have tried reversing them so I believe I can not set paths after .net..

Am I doing something wrong or is this not supported?

source

Comments

Sort:hotnew top

just_another_person@lemmy.world ⁨4⁩ ⁨weeks⁩ ago
I’m not super sure what you’re asking. I think you have some networking concepts confused with application routing, which in the case of a reverse proxy like this depends on how the forward host is passing requests.

source
- Blxter@lemmy.zip ⁨4⁩ ⁨weeks⁩ ago
  Sorry. I just mean to ask if I can use tailscale and funnel multiple ports in order to give access to a couple different selfhosted applications. I am not sure what application routing is. I am still not sure I explaining it well enough.
  
  source
  - Oisteink@lemmy.world ⁨4⁩ ⁨weeks⁩ ago
    It can be done but I’d advice to rather set up a reverse proxy and funnel that. Then set up your reverse proxy accordingly.
    
    Issue with the funnel is that its reverse proxy is a bit limited in rewriting. So if your service gas a native url of 127.0.0.1:8000/service1 then you serve it under /service1 If you have several services that expects to be served at root you might find it difficult to.
    
    source
    -> View More Comments
  - just_another_person@lemmy.world ⁨4⁩ ⁨weeks⁩ ago
    Tailscale doesn’t work on a port by port basis, it works by tunneling traffic from one IP net segment to another. I’m not sure what specifically Tailscale has out in front to work as a proxy for your connection, but the transport itself isn’t blocking ports or anything.
    
    source
ArtikBanana@lemmy.dbzer0.com ⁨4⁩ ⁨weeks⁩ ago
Since you already got some replies, a bit of a different approach would be to set those services up using Docker and having Tailscale as a sidecar to each one of those.
You will then be able to access each one as a seperate device. immich.*.ts.>!!<net etc.

source
- Blxter@lemmy.zip ⁨4⁩ ⁨weeks⁩ ago
  Did some looking at sidecar and it looks similar to another one I have called glueton for qbit. Immich and others are Allready running in docker so if I ‘sidecar’ tailscale to the container then as you said it could be immich.*.it’s.net right? Sounds good thanks for input.
  
  source
  - ArtikBanana@lemmy.dbzer0.com ⁨4⁩ ⁨weeks⁩ ago
    Yup.
    Tailscale has some documentation about it, and also a bunch of examples (And apparently one specific to Immich).
    
    source
    -> View More Comments
user224@lemmy.sdf.org ⁨4⁩ ⁨weeks⁩ ago
I too have no idea what this is about. I never used tailscale, and I have no idea what immich is.

But perhaps your problem is that the app expects to be on the root? Perhaps that could be a problem. Can you instead do another level sub-domain level like immich.pcname,tail$$$$$.ts.net? Or does the app (immich) allow you to set URL root?

Anyway, seems that may indeed be the issue, and also that tailscale cannot do those sub-domains as I thought based on the discussion I found. It seems this is the same issue: github.com/immich-app/immich/discussions/1679

And someone probably has a solution: gist.github.com/…/4b2b22b2198636b0a91c7c142ec11b3…

Again, I have no idea what Immich even is in the first place, Tailscale, I just know it exists. Consider me about as useful as AI, I just did some googling, with only prior info being that I had to set base URL in both kiwix-serve and Navidrome for them to work properly under a directory or whatever the part after slash is called.

source