Personal solution:

• Openssl certs (lots of youtube videos on best practice there).
• nginx reverse proxy manager
• adguard home using the dns rewrite pointing to the wildcard domain.

This is enough i find for intranet use. You can get fancy and put it over a wireguard or tailscale network too.

I have been experimenting with this recently. I just have tailscale pointing to adguard on a vm i use as an exit node and run nginx to handle the reverse proxy.

Tailscale can use relays if it cant find a way to make a p2p connection. Check the documentation. There is a command you can run to see whats using the relay.

I routed the dns of the vm to the tailscale adguard and it worked.

My theoretical reasoning is. Make adguard be the dns server tell tailscale to use that and then parse all rewrites and dns for the tailscale netwrok through that endpoint (including exit node which is on the same machine).

Glad im not the only one struggling with this. I was able to get nginx to give me the congratulation page via the tailscale ip for the machine but getting that routing to work with my own custom name is giving me a headache. I am probably adding an extra unnecessary layer by trying to use adguard home as a dns rewrite. If you crack it id love to hear how you achieved it.

deleted by creator

deleted by creator

deleted by creator

deleted by creator

That’s fair, I thought it was an easy implementation. But that’s my ignorance. It’s males sense that they pick what would benefit more people.

Thanks for the suggestion. I’ll give it a go.

Thanks, that’s what I ended up doing. I was looking in the wrong spot for the debug log when I wrote this post originally. Appears the satellite isn’t hearing the entire scentence. Bit frustrating but will keep at it.

The entity is exposed to the satellite and watch on the same asssist instance. Did a reboot just to see if it helped, but unfortunately, not. It’s like it’s on two different pipelines when they are just sharing the one.
Update: I put the satelite on a second pipeline and that solved the issue.