#tailscale

I run my personal homelab on one tailnet and work runs another, but the Tailscale app only keeps one of them active at a time. This post is my notes on running a second tailnet entirely in userspace, reached through a SOCKS proxy, without touching the host's routing.

I wanted my internal-only services on my k3s cluster to be accessible via friendly domain names instead of IP:port combos. Here's how I wired together Tailscale, Cloudflare DNS, cert-manager, and Traefik to make it work.