Tailscale

Tailscale gives the machine a stable HTTPS name on your tailnet and terminates TLS itself, so only your devices can reach the board. Authentication is the tailnet: a device that is not signed into it cannot reach the name at all.

Serve the port

$ tailscale serve --bg --https=443 localhost:9393
$ tailscale serve status

status reports the URL it is serving, in the form https://<machine>.<tailnet>.ts.net. Take the origin from there rather than composing it by hand — the MagicDNS name is not something you choose.

Tell Frizz the origin

  press R, choose Tailscale

  Origin  https://your-machine.your-tailnet.ts.net

Frizz reads your tailnet name while the pane is open, so the field is usually already filled in.

Frizz checks that a request’s Host matches the origin it was given, so the value has to be the exact origin a browser sees — scheme included, no trailing slash.

Stop serving

$ tailscale serve --https=443 localhost:9393 off

See the Tailscale Serve documentation for the current syntax, which moves faster than this page.