Tailscale Funnel question

Has anyone managed to get a Tailscale Funnel working with the standard/App Store implementation of Tailscale?

For anyone searching for this in the future, this is how I get it operational from the shell…

sudo ~/umbrel/scripts/app compose tailscale exec web tailscale funnel up

You’re then presented a webpage to open and confirm your settings.

Last you go back and run…

sudo ~/umbrel/scripts/app compose tailscale exec web tailscale funnel 1234 - replacing 1234 with whatever port you’re trying to access.

Your instance should then be accessible through your Tailnet and from the internet using an address like http://umbrel.YOURTAILNETDNS.ts.net:PORTNUMBER/

1 Like

I just tried it but few notes. Your command din’t work for me because of missing “scripts” directory. But I opened terminal directly for funnel thru Umbrel Web UI advanced settings, then did the same just without first parts. So : tailscale funnel up and tailscale funnel "port number" but unfortunately nothing loaded. In Tailscale it is showing funnel, but when I tried URL with correct port number, nothing loaded :confused: . Any idea how to troubleshoot? I just want to expose NextCloud to be able not to fiddle with VPN on phones etc.

Yes I’m trying to expose my BTC payserver via a funnel but tailscale funnel https://localhost:3003 doesn’t work, even with an SSL cert configed. Any ideas?

Sorry I’ve been busy and just now found time to try to get it work.
So here are instructions.
You can follow this tutorial on Tailscale Docs → Tailscale Funnel · Tailscale Docs
Be careful to also retrieve cert. You can open Tailscale CLI via Umbrel → Settings → Advanced settings → Terminal → Select Tailscale as app and you are there :slight_smile:

There just follow Tailscale Docs regarding funnel but first do the setup on Tailscale web, download cert and set SSL (maybe I left something out, just follow them)
After that, you can reveal your service via funnel using
tailscale funnel up
tailscale funnel 8081 (use port of your service that runs on Umbrel, you can find it in URL bar when you are on that service)

When Tailscale funnel is running, you can access it via URL, that CLI will throw up (one in the first line) or you can find it on Tailscale web ui under Machine settings. Use it WITHOUT port number.
(I saw note that you need to update cert on machine manually, it is showing expiration on Tailscale Web under machine setting in TSL section, mine says expiration is 2 months which is pretty anoying, when it will get me and I will find time to automate it, I will post instructions here)

Note:
I was trying to expose Nextcloud and had to edit config.php for trusted domain. If someone will do that, SSH into your umbrel and use there editor like Nano with sudo. You can find it probably under this route: ~/home/umbrel/umbrel/app-data/nextcloud/data/nextcloud/config

Happy setting up!