Setting up Tailscale

Tailscale installs directly on the host rather than running in Docker; it needs to see the machine's real network interfaces to work.

1
Install it
The official script handles most Linux distributions in one line. macOS, Windows, iOS, and Android all have their own native apps from tailscale.com instead.
```
curl -fsSL https://tailscale.com/install.sh | sh
```
2
Join the tailnet
This opens a browser link to authenticate; signing in (with an existing account or a new one) adds this machine to the private network.
```
sudo tailscale up
```
3
Approve the device if needed
Depending on the tailnet's settings, a brand-new device sometimes needs manual approval from the admin console before it can actually reach anything.
4
Optional: advertise routes or exit node
A machine can advertise the rest of the local subnet so other tailnet devices can reach it too, or offer itself as an exit node for routing all traffic through this network while away from home. Both need approval in the admin console after advertising.
```
sudo tailscale up --advertise-routes=192.168.1.0/24 --advertise-exit-node
```

Install it