ansible/tailscale
1
2
Fork
You've already forked tailscale
0
Ansible role that configures your Tailscale clients (on one or more tailnets)
2026年01月14日 10:40:37 +01:00
defaults/main Improved the accept-routes fix from previous commit. 2025年08月29日 21:38:13 +02:00
docs Note on how to quickly switch between tailnets. 2026年01月14日 10:40:37 +01:00
handlers Reload procps after enabling IP forwarding. Apt repo filename 2024年06月27日 04:45:06 +02:00
tasks Another fix for accept-routes: have to handle the case 2025年12月04日 22:32:44 +01:00
.gitignore Installs and configures Tailscale client 2021年03月14日 23:29:30 +01:00
LICENSE Major refactor. No more reboots. 2024年02月25日 05:25:38 +01:00
README.md Note on how to quickly switch between tailnets. 2026年01月14日 10:40:37 +01:00

Tailscale

This Ansible role installs and configures the Tailscale client. The role has been tested on Ubuntu Jammy and Noble.

This role was originally loosely based on the Ansible roles listed below. I am indebted to their authors for sharing their work and experience freely.

Using this role you can configure a tailnet with multiple devices where each node has its own set of tailscale up arguments. You should set at least that part of the tailscale dict somewhere with higher priority than role defaults, something along these lines:

tailscale:
 tailnet:
 - { host: pluto, args: "--accept-dns=false --accept-routes=true" }
 - { host: saturn, args: "--advertise-exit-node" }
 - { host: casablanca, args: "--accept-dns=false" }
 authkey: "tskey-auth-KEY_IDENTITY-KEY_SECRET"

See more notes in the docs/ folder in this repository.

Links and notes

Tailscale docs

Blogs, forums, rest of web

Ansible roles

Linux GUI

Opt out of client logging

Edit `/etc/default/tailscaled`` and add the following line:

TS_NO_LOGS_NO_SUPPORT=true

List currently invoked CLI flags?

Not very obvious, and the output is JSON, but it works:

$ tailscale debug prefs