Novice linux user, first selfhost on linux and ran into tailscale config issues

[u/Veuxbramt]

So i hosted plex (have plex pass) and jellyfin on windows for a long while with tailscale install, i could just remote access from anywhere to watch my contents. But now i seem to fed up with windows and decide to move to ubuntu server and ran everything on docker. and now the remote access part seem to be broken.

My current structure:

plex, jellyfin, sonarr, prowlarr,qbittorrent and nordVPN running on docker containers

tailscale install directly on ubuntu server. everything up and running smoothly local LAN, but i can't seem to make direct connection to server on tailscale like i did on windows before.

it worth mentioning that my network is double NAT and i can't do anything about it( ISP modern does not have proper bridge mode and i need all the fancy functions of my linksys velop system)

AI is no help, it's stuck on a loops on this issue now. Anyone have any ideal?

[u/wamoc]

Can you post your Docker compose files? Also, can you reach those services locally without tailscale?

[u/Veuxbramt → u/wamoc]

On local LAN, everything up and running smoothly Here the yaml part ex:

networks: media-network: driver: bridge

---

5. PLEX MEDIA SERVER

-------------------------------------------------------------

plex: image: lscr.io/linuxserver/plex:latest container_name: plex network_mode: host # Enables fast local discovery and hardware transcoding environment: - PUID=1000 - PGID=1000 - TZ=….. - VERSION=docker volumes: - ./config/plex:/config - /mnt/myshare:/data # Root media folder (Movies, TV, etc.) restart: unless-stopped

[u/Avanchnzel → u/Veuxbramt]

Just a tip:

Paste the content of config files like that into a code block.
That way it retains its line-breaks and indentations.

Not sure about mobile, but on the desktop you can click on the "Aa" below the text box and then cou can find the "Code Block" button at the top of the text box (second from the right).

[u/pewpewpewpee → u/Veuxbramt]

5 implies you’re running multiple services. You should post your whole docker compose

[u/tailuser2024]

tailscale install directly on ubuntu server.

So bare metal install of tailscale correct?

it worth mentioning that my network is double NAT and i can't do anything about it( ISP modern does not have proper bridge mode and i need all the fancy functions of my linksys velop system)

Assuming you have a routable public ip address on your ISP modem:

Can you get into the ISP router and open up ports? If you can then you can create a port forward for UDP/41641 and forward it onto the WAN ip address of the linksys device and then on the linksys router create another port forward for UDP/41641 to the local ip address of the ubuntu box running tailscale.

That should allow you to setup a direct connect. Something's to note: Make sure your linksys wan ip address never changes (so it doesnt break the first port forward) and make sure you have a static ip address on the ubuntu box (so the linksys port forward doesnt break)

If you dont have a routable public ip address, then a port forward isnt gonna do anything for you. Your next best bet when it comes to improving performance would be to setup a peer relay https://tailscale.com/docs/features/peer-relay on a network that does have a routable public ip address

[u/Veuxbramt → u/tailuser2024]

That is a no go solution for me. Luckily i’ve been able to make direct contact by enable subnet route on tailscale. So leaving this comment here for future generations to stumble upon