unrelated, but what's the path of least resistance to expose a couple of localhost-bound services to the tailnet, ideally with each having own hostname entry as the browser sees it?

they're not containerised, just plain old daemons.

▲

JayWS 4 hours ago | parent | next [-]

https://tailscale.com/kb/1552/tailscale-services

Tailscale services will do that. You can do the proxying with tailscale serve, services gives you the MagicDNS name and virtual IP address bound to it.

	▲	SSLy 3 hours ago \| parent [-]
		oh, that indeed worked. cheers!

▲

timwis 4 hours ago | parent | prev | next [-]

This should work out of the box with Magic DNS (part of tailscale features). If machine A is named larrys-laptop and is running a service on :8080, then from sandras-laptop just navigate to http://larrys-laptop:8080 and it should work, provided both machines are on the same tailnet.

▲

lkosewsk 4 hours ago | parent | prev [-]

Give Tailscale serve a shot (https://tailscale.com/kb/1312/serve).

*edited; I initially pointed to Funnel which would be used for sharing outside your tailnet.