Private access with Tailscale
Your station address at remotemyshack.com is the easy way to operate from anywhere, and most people never need anything else. If you already use Tailscale, the agent can also join your own private Tailscale network (your tailnet), so your devices on that network reach it directly.
How it differs
- No remotemyshack.com in the path. Your phone or laptop connects straight to the agent over your tailnet.
- No passkey sign-in. Anyone and any device on your tailnet can open the console, and the agent's setup page too. Only use it on a tailnet you control.
- Each device needs the Tailscale app, signed in to the same account.
- Transmissions made this way appear in the transmit log with local console as the operator.
Set it up
- On the shack computer, open the agent's setup page and expand Optional: private access with Tailscale.
- Scan the QR code with your phone to sign in to Tailscale, or click Or click here to sign in on this computer. Tailscale is free, and you can sign in with a Google, Apple, Microsoft or GitHub account. This adds the shack computer to your tailnet.
- If your tailnet requires new machines to be approved, the page says Waiting for this machine to be approved in your Tailscale admin console. Approve it there.
- When the page says ✓ This station is on your private Tailscale network, install Tailscale on your phone or laptop and sign in with the same account.
- Open the console address the page shows, which ends in
.ts.net. Add it to your home screen.
Turn on HTTPS for transmit audio
Browsers only allow the microphone on secure (HTTPS) pages. If the setup page shows One more switch, open the Tailscale admin console's DNS page, make sure MagicDNS is on, and click Enable HTTPS. The setup page updates by itself. Until then, you can listen over Tailscale but not transmit.
Turning it off
To stop the agent joining your tailnet, remove the machine in your Tailscale admin console. If the agent is started with the -no-tailscale option, the section says remote access is disabled.