This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/hhftechtips on 2025-05-26 17:05:14+00:00.

How it works:

1. Plugin intercepts requests to protected services
2. Serves a verification page that tests connectivity to your Tailscale domain
3. Only clients actually connected to Tailscale can pass the test
4. Sets secure session cookie for future requests
5. Everyone else gets blocked with helpful instructions

https://preview.redd.it/hr8ztizcq53f1.png?width=1920&format=png&auto=webp&s=0e1f6f70eaae6e5f50c16dc1120dc9a4da37ed35

The plugin is open source: github.com/hhftechnology/tailscale-access

Works with any Traefik v3 setup but integrates especially well with Pangolin's middleware manager and dynamic configuration system.

Questions on how to set up. either open discussion on GitHub or on our Discord

https://plugins.traefik.io/plugins/683465ecd8821f076a6ea05a/tailscale-connectivity-authentication