{"slug":"tailscale-on-a-proxmox-host","title":"Tailscale on a Proxmox host","tags":["tailscale"],"agent_summary":"Last validated: Jan 5, 2026","trigger_phrases":[],"runnable":false,"markdown":"\r\n# Tailscale on a Proxmox host\r\n\r\nLast validated: Jan 5, 2026\r\n\r\nProxmox is a popular open-source solution for running virtual machines and containers, built on top of a Debian Linux platform.\r\n\r\n[Installing Tailscale](https://tailscale.com/docs/install/linux) lets you access the Proxmox console from anywhere, without needing to open firewall ports or manually configure a VPN.\r\n\r\n![Access to the Proxmox Web UI via Tailscale.](https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fproxmox.88dcc0f3.png&w=3840&q=75)\r\n\r\n## [Enable HTTPS access to the Proxmox Web UI](https://tailscale.com/docs/integrations/proxmox\\#enable-https-access-to-the-proxmox-web-ui)\r\n\r\nThe Proxmox Web UI is served over HTTPS by default on port `8006`. The default certificate is self-signed, so you will need to accept the certificate warning in your browser. With Tailscale installed on the Proxmox host, you can generate a valid certificate, removing the need to accept the warning.\r\n\r\nThe following script will use Tailscale to generate a certificate for the Proxmox host and install it in the Proxmox certificate store.\r\n\r\nThis script has a `jq` dependency. You may need to install `jq` on your device.\r\n\r\nWith `apt`:\r\n\r\n```shell\r\napt -y install jq\r\n```\r\n\r\nWith `brew`:\r\n\r\n```shell\r\nbrew install jq\r\n```\r\n\r\n```shell\r\n#!/bin/bash\r\nNAME=\"$(tailscale status --json | jq '.Self.DNSName | .[:-1]' -r)\"\r\ntailscale cert \"${NAME}\"\r\npvenode cert set \"${NAME}.crt\" \"${NAME}.key\" --force --restart\r\n```\r\n\r\n(Optional) You may want to run this script as a `cron` job to ensure the certificate is kept up to date.\r\n\r\n1. Save this script to a file. For example: `update_cert.sh`.\r\n\r\n2. Change the file permissions to make it executable. For example:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n```shell\r\nchmod +x update_cert.sh\r\n```\r\n\r\n3. Create a `cron` job entry. For example, every 12 hours:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n```shell\r\n0 */12 * * * /path/to/update_cert.sh\r\n```\r\n\r\n\r\nAnother option is to use [Tailscale Serve](https://tailscale.com/docs/reference/tailscale-cli/serve) to proxy the Proxmox Web UI. This will let you access the Web UI using a valid certificate, automatically generated by Serve. In addition, you can omit the port number from the URL, as Serve can proxy the request on the default HTTPS port `443`.\r\n\r\n```shell\r\nsudo tailscale serve --bg https+insecure://localhost:8006\r\n```\r\n\r\nWe recommend using the `--bg` flag to allow Tailscale Serve to run as a background process.\r\n\r\n## [Troubleshooting](https://tailscale.com/docs/integrations/proxmox\\#troubleshooting)\r\n\r\nFor troubleshooting information, refer to [Troubleshooting Proxmox issues](https://tailscale.com/docs/reference/troubleshooting/containers/proxmox).\r\n\r\n![Project Logo](https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed)\r\n\r\nAsk AI\r\n\r\nreCAPTCHA\r\n\r\nRecaptcha requires verification.\r\n\r\nprotected by **reCAPTCHA**\r\n","html":"<h1>Tailscale on a Proxmox host</h1>\n<p>Last validated: Jan 5, 2026</p>\n<p>Proxmox is a popular open-source solution for running virtual machines and containers, built on top of a Debian Linux platform.</p>\n<p><a href=\"https://tailscale.com/docs/install/linux\">Installing Tailscale</a> lets you access the Proxmox console from anywhere, without needing to open firewall ports or manually configure a VPN.</p>\n<p><img src=\"https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fproxmox.88dcc0f3.png&#x26;w=3840&#x26;q=75\" alt=\"Access to the Proxmox Web UI via Tailscale.\"></p>\n<h2><a href=\"https://tailscale.com/docs/integrations/proxmox#enable-https-access-to-the-proxmox-web-ui\">Enable HTTPS access to the Proxmox Web UI</a></h2>\n<p>The Proxmox Web UI is served over HTTPS by default on port <code>8006</code>. The default certificate is self-signed, so you will need to accept the certificate warning in your browser. With Tailscale installed on the Proxmox host, you can generate a valid certificate, removing the need to accept the warning.</p>\n<p>The following script will use Tailscale to generate a certificate for the Proxmox host and install it in the Proxmox certificate store.</p>\n<p>This script has a <code>jq</code> dependency. You may need to install <code>jq</code> on your device.</p>\n<p>With <code>apt</code>:</p>\n<pre><code class=\"language-shell\">apt -y install jq\n</code></pre>\n<p>With <code>brew</code>:</p>\n<pre><code class=\"language-shell\">brew install jq\n</code></pre>\n<pre><code class=\"language-shell\">#!/bin/bash\r\nNAME=\"$(tailscale status --json | jq '.Self.DNSName | .[:-1]' -r)\"\r\ntailscale cert \"${NAME}\"\r\npvenode cert set \"${NAME}.crt\" \"${NAME}.key\" --force --restart\n</code></pre>\n<p>(Optional) You may want to run this script as a <code>cron</code> job to ensure the certificate is kept up to date.</p>\n<ol>\n<li>\n<p>Save this script to a file. For example: <code>update_cert.sh</code>.</p>\n</li>\n<li>\n<p>Change the file permissions to make it executable. For example:</p>\n</li>\n</ol>\n<pre><code class=\"language-shell\">chmod +x update_cert.sh\n</code></pre>\n<ol start=\"3\">\n<li>Create a <code>cron</code> job entry. For example, every 12 hours:</li>\n</ol>\n<pre><code class=\"language-shell\">0 */12 * * * /path/to/update_cert.sh\n</code></pre>\n<p>Another option is to use <a href=\"https://tailscale.com/docs/reference/tailscale-cli/serve\">Tailscale Serve</a> to proxy the Proxmox Web UI. This will let you access the Web UI using a valid certificate, automatically generated by Serve. In addition, you can omit the port number from the URL, as Serve can proxy the request on the default HTTPS port <code>443</code>.</p>\n<pre><code class=\"language-shell\">sudo tailscale serve --bg https+insecure://localhost:8006\n</code></pre>\n<p>We recommend using the <code>--bg</code> flag to allow Tailscale Serve to run as a background process.</p>\n<h2><a href=\"https://tailscale.com/docs/integrations/proxmox#troubleshooting\">Troubleshooting</a></h2>\n<p>For troubleshooting information, refer to <a href=\"https://tailscale.com/docs/reference/troubleshooting/containers/proxmox\">Troubleshooting Proxmox issues</a>.</p>\n<p><img src=\"https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed\" alt=\"Project Logo\"></p>\n<p>Ask AI</p>\n<p>reCAPTCHA</p>\n<p>Recaptcha requires verification.</p>\n<p>protected by <strong>reCAPTCHA</strong></p>\n"}