My Homelab Setup

Re:My Homelab Setup by dewey on Sunday March 08, 2026 @02:19PM (#47299615)

This is always annoying me with 1Password, before that I just always added subdomains but now I'm usually hosting everything behind Tailscale which makes this problem even worse as the differentiation is only the port.

[ Parent | on HN ]

Re:My Homelab Setup by domh on Sunday March 08, 2026 @03:09PM (#47300119)

You can use tailscale services to do this now:

https://tailscale.com/docs/features/tailscale-services

Then you can access stuff on your tailnet by going to http://service instead of http://ip:port

It works well! Only thing missing now is TLS

[ Parent | on HN ]

Re:My Homelab Setup by avtar on Sunday March 08, 2026 @04:17PM (#47300960)

This would be perfect with TLS. The docs don't make this clear...

> tailscale serve --service=svc:web-server --https=443 127.0.0.1:8080

> http://web-server.<tailnet-name>.ts.net:443/ > |-- proxy http://127.0.0.1:8080

> When you use the tailscale serve command with the HTTPS protocol, Tailscale automatically provisions a TLS certificate for your unique tailnet DNS name.

So is the certificate not valid? The 'Limitations' section doesn't mention anything about TLS either:

https://tailscale.com/docs/features/tailscale-services#limit...

[ Parent | on HN ]

Re:My Homelab Setup by domh on Monday March 09, 2026 @06:00AM (#47306939)

I think maybe TLS would work if you were to go to https://service.yourts.net domain, but I've not tried that.

[ Parent | on HN ]

Re:My Homelab Setup by nickdichev on Monday March 09, 2026 @07:22AM (#47307600)

It works, I’m using tailscale services with https

[ Parent | on HN ]

Re:My Homelab Setup by avtar on Monday March 09, 2026 @11:19AM (#47310234)

Thanks for clarifying :) I'll try it out this weekend.

[ Parent | on HN ]

Re:My Homelab Setup by wrxd on Sunday March 08, 2026 @02:46PM (#47299865)

You can still have subdomains with Tailscale. Point them at the tailscale IP address and run a reverse proxy in front of your services

[ Parent | on HN ]

Re:My Homelab Setup by dewey on Sunday March 08, 2026 @03:14PM (#47300178)

Good point, but for simplicity i'd still like 1Password to use the full hostname + port a the primary key and not the hostname.

[ Parent | on HN ]

Re:My Homelab Setup by zackify on Sunday March 08, 2026 @03:48PM (#47300590)

tailscale serve 4000 --BG

Problem solved ;)

[ Parent | on HN ]

Re:My Homelab Setup by miloschwartz on Sunday March 08, 2026 @07:53PM (#47302988)

Pangolin handles this nicely. You can define alias addresses for internal resources and keep the fully private and off the public internet. Also based on WireGuard like Tailscale.

[ Parent | on HN ]

Re:My Homelab Setup by altano on Monday March 09, 2026 @02:29AM (#47305469)

In the 1Password entry go to the "website" item. To right right there's an "autofill behavior" button. Change it to "Only fill on this exact host" and it will no longer show up unless the full host matches exactly

[ Parent | on HN ]

Re:My Homelab Setup by jorvi on Monday March 09, 2026 @09:54AM (#47309100)

Not entirely true. It can't seem to distinguish between ports..

[ Parent | on HN ]

Re:My Homelab Setup by mhurron on Monday March 09, 2026 @11:24AM (#47310317)

because ports don't indicate a different host.

[ Parent | on HN ]

Re:My Homelab Setup by karlshea on Monday March 09, 2026 @10:06AM (#47309263)

Omg thank you, I had no idea they added this feature!

[ Parent | on HN ]

Re:My Homelab Setup by oarsinsync on Monday March 09, 2026 @11:22AM (#47310287)

Is this a per-item behaviour or can this be set as a global default?

I'm guessing this is 1Password 8 only, as I can't see this option in 1Password 7.

[ Parent | on HN ]

Re:My Homelab Setup by vladvasiliu on Monday March 09, 2026 @11:55AM (#47310737)

I've looked in the settings on 1p8, and didn't find a setting for a global default.

[ Parent | on HN ]