Tools · Tailscale

Tailscale

Secure zero-config mesh VPN — connect all your devices privately.

↗ Open Tailscale Adminlogin.tailscale.com/admin/machines

Zero-config mesh VPN connecting Mac Mini, MacBook Pro, and iPhone via WireGuard. Lets the iPhone Dispatch client reach SYD Mission Control on Mac Mini without any port-forwarding.

Device status
Mac Mini
Stuttgart home
Primary SYD host
24/7 host · Mail, scheduled tasks, SYD Mission Control · user: conchaclan
Tailscale IP: 100.x.x.1
:3001:2727
MacBook Pro
Mobile / office
Secondary machine
Secondary machine · less frequently used · user: concha
Tailscale IP: 100.x.x.2
:3001
iPhone
Dispatch
Dispatch only
iOS PWA · Dispatch-mode Claude only · read-only vault access
Tailscale IP: 100.x.x.3
no direct ports — PWA client only
Port access table
Port
Service
Description
3001
Track 1 Full
Full Agentic OS — all routes, all agents
2727
Track 2 SYD
SYD Mission Control only — scoped sidebar, SYD routes
8080
Docling (optional)
Local Docling document AI server (start manually)
Why Tailscale for SYD
01
Zero-config mesh VPN
Tailscale assigns a stable 100.x.x.x IP to every device. No port-forwarding, no router config. Works through firewalls and CGNAT.
02
iPhone reaches SYD on port 3001
The iOS PWA connects to http://100.x.x.1:3001 (Mac Mini's Tailscale IP). Mission Control runs on Mac Mini — iPhone is a thin dispatch client.
03
No exposure to the internet
Tailscale traffic is peer-to-peer and encrypted (WireGuard). SYD ports are never open to the public internet.
04
Same-home network fallback
When all devices are on the same WiFi (Stuttgart home), Tailscale routes traffic locally — no relay, sub-millisecond latency.
05
MagicDNS hostnames
With MagicDNS enabled, devices are reachable by hostname (e.g., mac-mini) — no need to remember Tailscale IPs.
Access URLs
iPhone → SYD Mission Control
http://100.x.x.1:3001
Mac Mini Tailscale IP
iPhone → SYD Track 2 only
http://100.x.x.1:2727
scoped SYD sidebar
MacBook → Mac Mini SYD
http://mac-mini:3001
MagicDNS hostname (if enabled)
Tailscale Admin
https://login.tailscale.com/admin/machines
web console
Protocol
WireGuard · end-to-end encrypted
Free tier
Up to 3 users · 100 devices — sufficient for SYD
SYD role
iPhone ↔ Mac Mini secure tunnel