Tailscale Mesh on Anubiz Offshore VPS
Tailscale is the modern overlay network built on WireGuard. On an Anubiz VPS it creates a private mesh between your laptop, your home, and the VPS without opening inbound ports. Replaces SSH-from-the-internet entirely. This guide installs the agent, sets ACLs in the admin panel and configures Tailscale SSH so the VPS sshd port can be closed to the world.
Need this done for your project?
We implement, you ship. Async, documented, done in days.
Threat Model First
Tailscale's coordination server is a third party. Your metadata (which nodes, when, ip) lives at Tailscale. Headscale (self-hosted) is an alternative for paranoid setups.
Step 1: Install
curl -fsSL https://tailscale.com/install.sh | sh. tailscale up --ssh. Authenticate in the browser.
Step 2: ACL
In the Tailscale admin: tag the VPS (tag:anubiz). ACL grants tag:anubiz access from your personal device tag only. Default deny.
Step 3: Close Public SSH
Now that Tailscale SSH works, close port 22 to the world in nftables. SSH still works via the Tailscale IP.
Step 4: MagicDNS
Enabled in admin. ssh anubiz-vps1 just works from your laptop.
Step 5: Subnet Routes (optional)
Advertise the VPS internal subnet to other nodes: tailscale up --advertise-routes=10.0.0.0/24.
Related Services
Why Anubiz Host
Ready to get started?
Skip the research. Tell us what you need, and we'll scope it, implement it, and hand it back — fully documented and production-ready.