Skip to content

fix: remove startup warning with local tailscaled - #191

Open
dkaser wants to merge 1 commit into
tailscale:mainfrom
dkaser:fix/local-tailscaled-warning
Open

dkaser wants to merge 1 commit into
tailscale:mainfrom
dkaser:fix/local-tailscaled-warning

Conversation

@dkaser

@dkaser dkaser commented Sep 15, 2026

Copy link
Copy Markdown
Contributor

This removes the startup warning that labels -use-local-tailscaled as development-only and advises against production use.

The warning was initially added due to concerns that identity could be forged using XFF headers when tsidp was running in local-tailscaled mode. That concern was resolved via #179.

-use-local-tailscaled is beneficial for production environments because it allows for embedded installations of tsidp. For example, see https://github.com/dkaser/unraid-tsidp , which generates a local config file for tsidp, starts tsidp in local-tailscaled mode, and configures Unraid to use tsidp as an IdP. After installation, the only thing that a user has to do is add the authorized users to the Unraid configuration, and then they can log in with Tailscale.

Using tsnet mode would increase user friction and create additional failure modes for embedded installations:

  • Users have to either provide an auth key or do a separate login using the auth URL from the logs
  • Tailscale assigning a different hostname to the tsidp node on join (e.g., due to conflict with an existing instance / previous install), which the user would then have to correct/provide
  • Connectivity issues between the appliance and the tsidp instance it creates (e.g., if the user tags their appliance, but fails to tag the running tsidp instance or otherwise has the communication between the two blocked by policy)

Signed-off-by: Derek Kaser <11674153+dkaser@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant