You can use tailscale services to do this now: https://tailscale.com/docs/featur...

avtar · 2026-03-08T20:17:32 1773001052

This would be perfect with TLS. The docs don't make this clear...

> tailscale serve --service=svc:web-server --https=443 127.0.0.1:8080

> http://web-server.<tailnet-name>.ts.net:443/ > |-- proxy http://127.0.0.1:8080

> When you use the tailscale serve command with the HTTPS protocol, Tailscale automatically provisions a TLS certificate for your unique tailnet DNS name.

So is the certificate not valid? The 'Limitations' section doesn't mention anything about TLS either:

https://tailscale.com/docs/features/tailscale-services#limit...

domh · 2026-03-09T10:00:52 1773050452

I think maybe TLS would work if you were to go to https://service.yourts.net domain, but I've not tried that.

nickdichev · 2026-03-09T11:22:14 1773055334

It works, I’m using tailscale services with https

avtar · 2026-03-09T15:19:07 1773069547

Thanks for clarifying :) I'll try it out this weekend.