Tailscale ¶

proxies:
  - name: "tailscale"
    type: tailscale
    hostname: mihomo
    auth-key: tskey-auth-xxxx
    control-url: https://controlplane.tailscale.com
    state-dir: ./tailscale
    ephemeral: false
    udp: true
    accept-routes: true
    exit-node: 100.64.0.1
    exit-node-allow-lan-access: true
    dialer-proxy: "ss1"
    interface-name: "WLAN"
    routing-mark: 6666
    ip-version: ipv4-prefer

hostname ¶

Optional, Tailscale device name. If omitted, it is handled by tsnet.

auth-key ¶

Optional, login key for Tailscale or Headscale. If omitted, an interactive login URL is printed in the logs on first startup.

control-url ¶

Optional, custom Tailscale control server or Headscale URL.

state-dir ¶

Optional, tsnet state directory. Default: tailscale.

ephemeral ¶

Optional, whether to log in as an ephemeral node. Default: false.

udp ¶

Optional, whether to enable UDP. Default: false.

accept-routes ¶

Optional, whether to accept subnet routes published in the Tailnet.

exit-node ¶

Optional, use the specified exit node. You can specify a node IP, and auto:any is also supported.

When the target is not within Tailscale routes, the connection fails directly and does not fall back to direct. To access the public internet, configure an available exit-node, or accept subnet routes that cover the target network.

exit-node-allow-lan-access ¶

Optional, whether to allow access to the local LAN when using an exit node.

dialer-proxy ¶

Optional, identifier of an outbound proxy. When non-empty, the specified proxy is used for Tailscale control plane, DERP/STUN, and other service connections.

interface-name ¶

Optional, specifies the outbound network interface.

routing-mark ¶

Optional, configures fwmark on Linux.

ip-version ¶

Optional, specifies the IP version used for outbound connections.

Available values: dual/ipv4/ipv6/ipv4-prefer/ipv6-prefer.