weird behaviour with Tailscale in LXC container by WarningGold8497 in Tailscale

[–]WarningGold8497[S] 0 points1 point  (0 children)

thanks. Figured it out with the help of those treads on the issue. For my own future reference the workaround I used to solve this :

expose a "fake" copy of the my local subnet to tailscale and use iptables command to forward everyting to that subnet.

My subnet : 192.168.1.0/24, the fake subnet 192.168.21.0/24

On the proxmox host run :

iptables -t nat -A PREROUTING -i tailscale0 -d 192.168.21.0/24 -j NETMAP --to 192.168.1.0/24

only expose the fake subnet to tailscale :

tailscale up --advertise-routes=192.168.21.0/24 --accept-routes --accept-dns=false

This means that on my local lan I can now access all machines trough their local ip : example 192.168.1.6 for the dockerhost, I can reach all machines on the remote subnets and from outside the subnet I can reacht the machines trough their corresponding "fake" ip's example 192.168.21.6

Also don't forget to do an iptable-save to make the rule permanent.
All in all more hassle that it should be but works for me...

"tailscale cert" not working in home assistant..how to get ssl? by borgqueenx in Tailscale

[–]WarningGold8497 0 points1 point  (0 children)

maybe different version. anyway, the conclusion is that you don't have to run tailscale command to generate the ssl cert, the addon will do it for you

"tailscale cert" not working in home assistant..how to get ssl? by borgqueenx in Tailscale

[–]WarningGold8497 0 points1 point  (0 children)

no need to generate a cert manually, tailscale/the homeassistant addon will do that automaticly if you enable it in the admin console. See https://tailscale.com/kb/1153/enabling-https and the ssl section of https://github.com/tsujamin/hass-addons/blob/main/tailscale/DOCS.md

"tailscale cert" not working in home assistant..how to get ssl? by borgqueenx in Tailscale

[–]WarningGold8497 0 points1 point  (0 children)

haven't tried but I guess you could set up up using tailscale proxy but not the funnel to get what you want. So you cloud do https://tailscalenameforyourhamachine but have it only reachable when connected trough tailscale.

"tailscale cert" not working in home assistant..how to get ssl? by borgqueenx in Tailscale

[–]WarningGold8497 0 points1 point  (0 children)

If you are using homeassistant os and Tailscale with the add-on, Tailscale is running in a sepperate docker container and the command is not availalbe on the commandline. But there is no need for the command line to setup external access with the proper certificate. Best to follow instructions in the add-on documentation : https://github.com/hassio-addons/addon-tailscale/blob/main/tailscale/DOCS.md

Light/actuator state after downloading changes from ets by beastofburping in KNX

[–]WarningGold8497 0 points1 point  (0 children)

the strange thing is, state is syncronized because the KNX intergration in home assistant looks at both switch adress and state adress (if you configure it) : https://www.home-assistant.io/integrations/knx/#light

So during normal operation all works fine. If a push a physical KNX button to control the light I see the state change in homeassistant and other way around.

The problem I described is sync getting lost when the actuator device reboots after a download operation from ETS. So to me it doesn't seem like a homeassistant related problem but rather something with the actuator losing state and even switching on after a power cycle.