{"slug":"access-unraid-nas-from-anywhere","title":"Access Unraid NAS from anywhere","tags":["tailscale","access-control"],"agent_summary":"Last validated: Jan 5, 2026","trigger_phrases":[],"runnable":false,"markdown":"\r\n# Access Unraid NAS from anywhere\r\n\r\nLast validated: Jan 5, 2026\r\n\r\n[Unraid](https://unraid.net/) is a Linux-based network-attached storage (NAS) operating system. Official support for Tailscale was added in Unraid v7.\r\n\r\nUnraid lets you:\r\n\r\n- Pool multiple, mismatched-sized drives into a single array or volume.\r\n- Use a wide variety of features for remote management.\r\n- Use built-in Docker support for many apps.\r\n- Use advanced virtual machine engine tools such as [libvirt](https://libvirt.org/) and [QEMU](https://www.qemu.org/) to support PCI passthrough for high performance-gaming VMs.\r\n\r\nFor more information, refer to [Unraid's Tailscale](https://docs.unraid.net/go/tailscale/) documentation.\r\n\r\n## [Requirements](https://tailscale.com/docs/integrations/unraid\\#requirements)\r\n\r\n- At least one Unraid server with administrative access.\r\n- An existing tailnet. For instructions, refer to [Tailscale quickstart](https://tailscale.com/docs/how-to/quickstart).\r\n- You must be an [Owner, Admin, or IT admin](https://tailscale.com/docs/reference/user-roles) of a tailnet for some actions needed in the admin console.\r\n\r\n## [Install Tailscale in Unraid](https://tailscale.com/docs/integrations/unraid\\#install-tailscale-in-unraid)\r\n\r\nWe recommend the Tailscale (Plugin) which Derek Kaser maintains on behalf of Unraid.\r\n\r\n1. Open the Unraid web interface.\r\n\r\n2. Select the **Apps** menu.\r\n1. If this is a brand new Unraid server, select the **Install Community Applications** plugin option.\r\n2. Search for the Tailscale plugin.\r\n3. Select the app labeled **Tailscale (Plugin)**. Make sure you select this plugin and ignore the other legacy options, such as Docker.\r\n4. Select **Install**.\r\n5. After the plugin is installed, select the **Settings** menu in the Unraid web interface.\r\n6. Go to the **Network Services** section and select **Tailscale**.\r\n7. Select **Reauthenticate** \\> **Connect** to add the server to your tailnet. A message might display indicating that the Tailscale key will expire. This message is normal and key expiry can be disabled. For more information, refer to [Key expiry](https://tailscale.com/docs/features/access-control/key-expiry).\r\n3. Open the [Machines](https://login.tailscale.com/admin/machines) page of the Tailscale admin console and verify that the Unraid server is added.\r\n\r\n\r\n\r\nIf [device approval](https://tailscale.com/docs/features/access-control/device-management/device-approval) is enabled, you might need to approve the server from the [Machines](https://login.tailscale.com/admin/machines) page of the admin console to let the Unraid server to communicate with other devices in your tailnet.\r\n\r\n\r\nFrom the [Machines](https://login.tailscale.com/admin/machines) page of the admin console, you can locate the tailnet `100.x.y.z` IP address for the Unraid server. Use that address, or the tailnet hostname, such as `tower`, to connect to the Unraid user interface from another device in your tailnet, using a web browser.\r\n\r\n## [Unraid as a Tailscale exit node](https://tailscale.com/docs/integrations/unraid\\#unraid-as-a-tailscale-exit-node)\r\n\r\nYou can configure the Unraid server as an [exit node](https://tailscale.com/docs/features/exit-nodes) to route traffic for other devices in the tailnet using the Unraid server. This can be useful when using an untrusted Wi-Fi connection in a coffee shop or accessing online services (such as banking) that require devices to be in a specific country or region.\r\n\r\n1. To configure Unraid as an exit node open the Unraid web interface.\r\n1. Select **Plugins**.\r\n2. Select **Tailscale** by selecting the Tailscale logo.\r\n3. Ensure you are authenticated properly to your tailnet by selecting the user avatar / logo in the top right.\r\n      1. Once logged in, you will be able to select which exit node Unraid should use or enable Unraid to be an exit node.\r\n4. To configure Unraid to be an exit node for your tailnet.\r\n      1. Select **Run as Exit Node** from the **Exit node** UI.\r\n5. To configure Unraid to use an exit node elsewhere in your tailnet.\r\n      1. Select **node name** from the **Exit node** UI.\r\n\r\nAfter you configure the Unraid side, you must approve the exit node request in the Tailscale admin console.\r\n\r\nYou can [configure `autoApprovers`](https://tailscale.com/docs/reference/syntax/policy-file#auto-approvers) to automatically approve new exit node requests.\r\n\r\n1. Open the [Machines](https://login.tailscale.com/admin/machines) page of the Tailscale admin console.\r\n1. Locate the Unraid server in the list. If configured correctly it will display the **Exit Node** badge.\r\n2. Each exit node requires manual approval. To approve devices as an exit node, in the Tailscale admin console, select the ![ellipsis icon](https://tailscale.com/files/images/icons/fa-ellipsis-h.svg) menu next to the exit node, then select **Edit route settings**.\r\n3. Check the **Use as exit node** box, then select **Save**.\r\n\r\nTo configure other devices in your tailnet to use the Unraid server as an exit node, refer to [Use exit nodes](https://tailscale.com/docs/features/exit-nodes/how-to/setup).\r\n\r\n## [Unraid as a Tailscale subnet router](https://tailscale.com/docs/integrations/unraid\\#unraid-as-a-tailscale-subnet-router)\r\n\r\nYou can configure the Unraid server as a [subnet router](https://tailscale.com/docs/features/subnet-routers) to access any devices or exit nodes in your physical network that cannot be added to your tailnet. For example, you can remotely connect to a printer.\r\n\r\n1. Open the Unraid web interface.\r\n1. Select the terminal icon ( **>\\_**) in the main menu.\r\n\r\n2. Enter the following commands:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n      ```shell\r\n      tailscale up --advertise-routes=192.0.2.0/24\r\n      ```\r\n\r\n\r\n\r\n      If you want to add multiple subnets, you can include additional CIDR IP ranges separated by a comma.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n      ```shell\r\n      tailscale up --advertise-routes=192.168.1.0/24,198.160.50.0/24\r\n      ```\r\n2. Go to the [Machines](https://login.tailscale.com/admin/machines) page of the admin console and locate the Unraid server in the list. It should display the **Subnets** badge.\r\n1. Select the ![ellipsis icon](https://tailscale.com/files/images/icons/fa-ellipsis-h.svg) menu, then select **Edit route settings**.\r\n2. Check the IP range boxes that correspond to the subnet routes you want to advertise, then select **Save**.\r\n3. Go back to the Unraid web interface, open the Tailscale app, and verify that subnets are enabled.\r\n\r\n\r\n## [Native Docker and Tailscale integration](https://tailscale.com/docs/integrations/unraid\\#native-docker-and-tailscale-integration)\r\n\r\nAs of Unraid v7, you can automatically join containers created on an Unraid server to your tailnet. This lets each container appear as a unique device in your tailnet. A case for this would be sharing a service with a non-tailnet user or device, without sharing the Unraid server through Tailscale.\r\n\r\nRefer to the [Unraid maintained documentation](https://docs.unraid.net/go/tailscale-docker/) for more information about integration.\r\n\r\n### [Automatically join containers to your tailnet](https://tailscale.com/docs/integrations/unraid\\#automatically-join-containers-to-your-tailnet)\r\n\r\nYou can automate the adding of containers to your tailnet programmatically using a Tailscale OAuth client secret.\r\n\r\n1. Tailscale prerequisites:\r\n1. Create an appropriate [tag](https://tailscale.com/docs/features/tags) in your [tailnet policy file](https://tailscale.com/docs/features/tailnet-policy-file).\r\n2. Generate an [OAuth client](https://tailscale.com/docs/features/oauth-clients) with permissions to **Read** and **Write** [Auth Keys](https://tailscale.com/docs/features/access-control/auth-keys).\r\n3. Enable [HTTPS certificates](https://tailscale.com/docs/how-to/set-up-https-certificates) for your tailnet.\r\n2. In the Unraid web interface, select a container for creation.\r\n1. In the **Add Container** menu, set **Use Tailscale** to on.\r\n\r\n2. Enter an appropriate hostname for the container in your tailnet.\r\n\r\n3. Select **Tailscale Show Advanced Settings**.\r\n\r\n4. Enter the following string in the **Tailscale Extra Parameters** field, making sure to update the values with your own:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n      ```shell\r\n      --authkey=tskey-client-kQ3XbSTPg921CNTRL-teMgW7PkZ2No9xr1CRTt1N7k45u3MnKpZ --advertise-tags=tag:example\r\n      ```\r\n\r\n5. Select **Apply**.\r\n\r\n6. Your service should now be available with a TLS certificate from the following location:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n      ```shell\r\n      https://myservice.example.ts.net\r\n      ```\r\n\r\n![Project Logo](https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed)\r\n\r\nAsk AI\r\n\r\nreCAPTCHA\r\n\r\nRecaptcha requires verification.\r\n\r\nprotected by **reCAPTCHA**\r\n","html":"<h1>Access Unraid NAS from anywhere</h1>\n<p>Last validated: Jan 5, 2026</p>\n<p><a href=\"https://unraid.net/\">Unraid</a> is a Linux-based network-attached storage (NAS) operating system. Official support for Tailscale was added in Unraid v7.</p>\n<p>Unraid lets you:</p>\n<ul>\n<li>Pool multiple, mismatched-sized drives into a single array or volume.</li>\n<li>Use a wide variety of features for remote management.</li>\n<li>Use built-in Docker support for many apps.</li>\n<li>Use advanced virtual machine engine tools such as <a href=\"https://libvirt.org/\">libvirt</a> and <a href=\"https://www.qemu.org/\">QEMU</a> to support PCI passthrough for high performance-gaming VMs.</li>\n</ul>\n<p>For more information, refer to <a href=\"https://docs.unraid.net/go/tailscale/\">Unraid's Tailscale</a> documentation.</p>\n<h2><a href=\"https://tailscale.com/docs/integrations/unraid#requirements\">Requirements</a></h2>\n<ul>\n<li>At least one Unraid server with administrative access.</li>\n<li>An existing tailnet. For instructions, refer to <a href=\"https://tailscale.com/docs/how-to/quickstart\">Tailscale quickstart</a>.</li>\n<li>You must be an <a href=\"https://tailscale.com/docs/reference/user-roles\">Owner, Admin, or IT admin</a> of a tailnet for some actions needed in the admin console.</li>\n</ul>\n<h2><a href=\"https://tailscale.com/docs/integrations/unraid#install-tailscale-in-unraid\">Install Tailscale in Unraid</a></h2>\n<p>We recommend the Tailscale (Plugin) which Derek Kaser maintains on behalf of Unraid.</p>\n<ol>\n<li>\n<p>Open the Unraid web interface.</p>\n</li>\n<li>\n<p>Select the <strong>Apps</strong> menu.</p>\n</li>\n<li>\n<p>If this is a brand new Unraid server, select the <strong>Install Community Applications</strong> plugin option.</p>\n</li>\n<li>\n<p>Search for the Tailscale plugin.</p>\n</li>\n<li>\n<p>Select the app labeled <strong>Tailscale (Plugin)</strong>. Make sure you select this plugin and ignore the other legacy options, such as Docker.</p>\n</li>\n<li>\n<p>Select <strong>Install</strong>.</p>\n</li>\n<li>\n<p>After the plugin is installed, select the <strong>Settings</strong> menu in the Unraid web interface.</p>\n</li>\n<li>\n<p>Go to the <strong>Network Services</strong> section and select <strong>Tailscale</strong>.</p>\n</li>\n<li>\n<p>Select <strong>Reauthenticate</strong> > <strong>Connect</strong> to add the server to your tailnet. A message might display indicating that the Tailscale key will expire. This message is normal and key expiry can be disabled. For more information, refer to <a href=\"https://tailscale.com/docs/features/access-control/key-expiry\">Key expiry</a>.</p>\n</li>\n<li>\n<p>Open the <a href=\"https://login.tailscale.com/admin/machines\">Machines</a> page of the Tailscale admin console and verify that the Unraid server is added.</p>\n</li>\n</ol>\n<p>If <a href=\"https://tailscale.com/docs/features/access-control/device-management/device-approval\">device approval</a> is enabled, you might need to approve the server from the <a href=\"https://login.tailscale.com/admin/machines\">Machines</a> page of the admin console to let the Unraid server to communicate with other devices in your tailnet.</p>\n<p>From the <a href=\"https://login.tailscale.com/admin/machines\">Machines</a> page of the admin console, you can locate the tailnet <code>100.x.y.z</code> IP address for the Unraid server. Use that address, or the tailnet hostname, such as <code>tower</code>, to connect to the Unraid user interface from another device in your tailnet, using a web browser.</p>\n<h2><a href=\"https://tailscale.com/docs/integrations/unraid#unraid-as-a-tailscale-exit-node\">Unraid as a Tailscale exit node</a></h2>\n<p>You can configure the Unraid server as an <a href=\"https://tailscale.com/docs/features/exit-nodes\">exit node</a> to route traffic for other devices in the tailnet using the Unraid server. This can be useful when using an untrusted Wi-Fi connection in a coffee shop or accessing online services (such as banking) that require devices to be in a specific country or region.</p>\n<ol>\n<li>To configure Unraid as an exit node open the Unraid web interface.</li>\n<li>Select <strong>Plugins</strong>.</li>\n<li>Select <strong>Tailscale</strong> by selecting the Tailscale logo.</li>\n<li>Ensure you are authenticated properly to your tailnet by selecting the user avatar / logo in the top right.\n<ol>\n<li>Once logged in, you will be able to select which exit node Unraid should use or enable Unraid to be an exit node.</li>\n</ol>\n</li>\n<li>To configure Unraid to be an exit node for your tailnet.\n<ol>\n<li>Select <strong>Run as Exit Node</strong> from the <strong>Exit node</strong> UI.</li>\n</ol>\n</li>\n<li>To configure Unraid to use an exit node elsewhere in your tailnet.\n<ol>\n<li>Select <strong>node name</strong> from the <strong>Exit node</strong> UI.</li>\n</ol>\n</li>\n</ol>\n<p>After you configure the Unraid side, you must approve the exit node request in the Tailscale admin console.</p>\n<p>You can <a href=\"https://tailscale.com/docs/reference/syntax/policy-file#auto-approvers\">configure <code>autoApprovers</code></a> to automatically approve new exit node requests.</p>\n<ol>\n<li>Open the <a href=\"https://login.tailscale.com/admin/machines\">Machines</a> page of the Tailscale admin console.</li>\n<li>Locate the Unraid server in the list. If configured correctly it will display the <strong>Exit Node</strong> badge.</li>\n<li>Each exit node requires manual approval. To approve devices as an exit node, in the Tailscale admin console, select the <img src=\"https://tailscale.com/files/images/icons/fa-ellipsis-h.svg\" alt=\"ellipsis icon\"> menu next to the exit node, then select <strong>Edit route settings</strong>.</li>\n<li>Check the <strong>Use as exit node</strong> box, then select <strong>Save</strong>.</li>\n</ol>\n<p>To configure other devices in your tailnet to use the Unraid server as an exit node, refer to <a href=\"https://tailscale.com/docs/features/exit-nodes/how-to/setup\">Use exit nodes</a>.</p>\n<h2><a href=\"https://tailscale.com/docs/integrations/unraid#unraid-as-a-tailscale-subnet-router\">Unraid as a Tailscale subnet router</a></h2>\n<p>You can configure the Unraid server as a <a href=\"https://tailscale.com/docs/features/subnet-routers\">subnet router</a> to access any devices or exit nodes in your physical network that cannot be added to your tailnet. For example, you can remotely connect to a printer.</p>\n<ol>\n<li>\n<p>Open the Unraid web interface.</p>\n</li>\n<li>\n<p>Select the terminal icon ( <strong>>_</strong>) in the main menu.</p>\n</li>\n<li>\n<p>Enter the following commands:</p>\n<pre><code class=\"language-shell\">tailscale up --advertise-routes=192.0.2.0/24\n</code></pre>\n<p>If you want to add multiple subnets, you can include additional CIDR IP ranges separated by a comma.</p>\n<pre><code class=\"language-shell\">tailscale up --advertise-routes=192.168.1.0/24,198.160.50.0/24\n</code></pre>\n</li>\n<li>\n<p>Go to the <a href=\"https://login.tailscale.com/admin/machines\">Machines</a> page of the admin console and locate the Unraid server in the list. It should display the <strong>Subnets</strong> badge.</p>\n</li>\n<li>\n<p>Select the <img src=\"https://tailscale.com/files/images/icons/fa-ellipsis-h.svg\" alt=\"ellipsis icon\"> menu, then select <strong>Edit route settings</strong>.</p>\n</li>\n<li>\n<p>Check the IP range boxes that correspond to the subnet routes you want to advertise, then select <strong>Save</strong>.</p>\n</li>\n<li>\n<p>Go back to the Unraid web interface, open the Tailscale app, and verify that subnets are enabled.</p>\n</li>\n</ol>\n<h2><a href=\"https://tailscale.com/docs/integrations/unraid#native-docker-and-tailscale-integration\">Native Docker and Tailscale integration</a></h2>\n<p>As of Unraid v7, you can automatically join containers created on an Unraid server to your tailnet. This lets each container appear as a unique device in your tailnet. A case for this would be sharing a service with a non-tailnet user or device, without sharing the Unraid server through Tailscale.</p>\n<p>Refer to the <a href=\"https://docs.unraid.net/go/tailscale-docker/\">Unraid maintained documentation</a> for more information about integration.</p>\n<h3><a href=\"https://tailscale.com/docs/integrations/unraid#automatically-join-containers-to-your-tailnet\">Automatically join containers to your tailnet</a></h3>\n<p>You can automate the adding of containers to your tailnet programmatically using a Tailscale OAuth client secret.</p>\n<ol>\n<li>\n<p>Tailscale prerequisites:</p>\n</li>\n<li>\n<p>Create an appropriate <a href=\"https://tailscale.com/docs/features/tags\">tag</a> in your <a href=\"https://tailscale.com/docs/features/tailnet-policy-file\">tailnet policy file</a>.</p>\n</li>\n<li>\n<p>Generate an <a href=\"https://tailscale.com/docs/features/oauth-clients\">OAuth client</a> with permissions to <strong>Read</strong> and <strong>Write</strong> <a href=\"https://tailscale.com/docs/features/access-control/auth-keys\">Auth Keys</a>.</p>\n</li>\n<li>\n<p>Enable <a href=\"https://tailscale.com/docs/how-to/set-up-https-certificates\">HTTPS certificates</a> for your tailnet.</p>\n</li>\n<li>\n<p>In the Unraid web interface, select a container for creation.</p>\n</li>\n<li>\n<p>In the <strong>Add Container</strong> menu, set <strong>Use Tailscale</strong> to on.</p>\n</li>\n<li>\n<p>Enter an appropriate hostname for the container in your tailnet.</p>\n</li>\n<li>\n<p>Select <strong>Tailscale Show Advanced Settings</strong>.</p>\n</li>\n<li>\n<p>Enter the following string in the <strong>Tailscale Extra Parameters</strong> field, making sure to update the values with your own:</p>\n<pre><code class=\"language-shell\">--authkey=tskey-client-kQ3XbSTPg921CNTRL-teMgW7PkZ2No9xr1CRTt1N7k45u3MnKpZ --advertise-tags=tag:example\n</code></pre>\n</li>\n<li>\n<p>Select <strong>Apply</strong>.</p>\n</li>\n<li>\n<p>Your service should now be available with a TLS certificate from the following location:</p>\n<pre><code class=\"language-shell\">https://myservice.example.ts.net\n</code></pre>\n</li>\n</ol>\n<p><img src=\"https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed\" alt=\"Project Logo\"></p>\n<p>Ask AI</p>\n<p>reCAPTCHA</p>\n<p>Recaptcha requires verification.</p>\n<p>protected by <strong>reCAPTCHA</strong></p>\n"}