[avtar]

This would be perfect with TLS. The docs don't make this clear...

> tailscale serve --service=svc:web-server --https=443 127.0.0.1:8080

> http://web-server.<tailnet-name>.ts.net:443/ > |-- proxy http://127.0.0.1:8080

> When you use the tailscale serve command with the HTTPS protocol, Tailscale automatically provisions a TLS certificate for your unique tailnet DNS name.

So is the certificate not valid? The 'Limitations' section doesn't mention anything about TLS either:

https://tailscale.com/docs/features/tailscale-services#limit...

[domh]

I think maybe TLS would work if you were to go to https://service.yourts.net domain, but I've not tried that.

[nickdichev]

It works, I’m using tailscale services with https

[avtar]

Thanks for clarifying :) I'll try it out this weekend.