Skip to main content
Browse documentation

Use Tailscale or Headscale with BYOH

Select Tailscale or Your Headscale server during BYOH connection setup. The management agent still connects outward to the panel; private-network setup determines how you reach the apps.

Deploy and approve​

  1. Complete the connection details and install the agent.
  2. Deploy a compatible app on the connected server.
  3. Open the app’s private-network section and follow its approval link.
  4. Approve/register the device with the selected provider.
  5. Connect your own device to the same network and open the assigned private address.

Headscale requirements​

Your Headscale controller must be reachable at a valid HTTPS URL. Devices use the Tailscale client against that controller. Enable the required private DNS/MagicDNS settings.

Headscale private web access uses HTTP over the encrypted network. An app that requires HTTPS cookies or secure browser features may not work with this address. Verify the app before relying on it.

Keep the scope in mind​

Private apps are not public websites. External webhooks, public callbacks and ordinary internet visitors cannot reach a private-only address. Test any integrations you need.

Read the panel’s warning before disconnecting or changing access modes; some disconnect actions restore public access. For hosted app controls, see private networking.