| 26 Jul 2025 |
 ElvishJerricco | and I don't think there's a way to distribute custom dns over tailscale | 07:34:01 |
| ElvishJerricco | (I'm also bad at networking and might have this all wrong) | 07:34:43 |
 Zhaofeng Li | there is, you can force a resolver across all your devices | 07:34:49 |
| Zhaofeng Li | (I force it to controld because I'm lazy, but you can point it at your unbound for example) | 07:35:23 |
| ElvishJerricco | oh I see. You can add a nameserver in the control plane ui, and I could just point that at one of my tailscale machines and have that distribute custom records for a domain I own, then get certs manually for that domain with LetsEncrypt | 07:37:35 |
| ElvishJerricco | Zhaofeng Li: does that sound like what you're thinking? | 07:37:49 |
| Zhaofeng Li | yeah exactly, and you can add some ad-blocking hosts files while you are at it too | 07:39:00 |
| ElvishJerricco | that is still frustratingly manual, but at least the dns is private | 07:39:38 |
| Zhaofeng Li | yeah it does take some setup but should be manageable | 07:41:39 |
 K900 | In reply to @elvishjerricco:matrix.org
oh I see. You can add a nameserver in the control plane ui, and I could just point that at one of my tailscale machines and have that distribute custom records for a domain I own, then get certs manually for that domain with LetsEncrypt I just do normal ACME with DNS challenge | 07:41:42 |
| Zhaofeng Li | (well I feel like a hypocrite saying this because I don't do it myself :p) | 07:41:53 |
| Zhaofeng Li | I personally don't care about the private DNS part, like my miniflux is at news.naive.network which is publicly resolvable but it points at a tailscale address | 07:43:09 |
| ElvishJerricco | yea sure I said "manual" but I just meant "tailscale's not going to provision it for me" | 07:44:54 |
| K900 | Wait Tailscale can do that? | 07:46:53 |
