Tailscale for Moltbot Remote Access

Tailscale provides zero-trust networking that’s perfect for securing remote access to your Moltbot gateway without exposing ports to the internet.

Why Tailscale?

Security Benefits

• Zero-trust architecture - No open ports to the internet
• End-to-end encryption - WireGuard-based, always encrypted
• Identity-based access - Users, not IP addresses
• Audit logging - Complete access trail

Ease of Use

• No port forwarding - Works through NAT
• Automatic key management - No manual PKI
• Cross-platform - Works everywhere
• 5-minute setup - Really, 5 minutes

Tailscale vs Traditional Approaches

Feature	Tailscale	VPN	Port Forwarding
Open ports required	❌	✅	✅
End-to-end encryption	✅	✅	❌
Identity-based	✅	Sometimes	❌
NAT traversal	✅	Complex	Complex
Setup time	5 min	1+ hours	30+ min

Setup Guide

1. Install Tailscale

# On your Moltbot server
curl -fsSL https://tailscale.com/install.sh | sh

# Start and authenticate
sudo tailscale up

2. Use Tailscale Serve (Recommended)

Serve exposes your local gateway only to your Tailnet:

# Expose gateway to your Tailnet
tailscale serve https / http://127.0.0.1:8080

# Now accessible at: https://moltbot-server.tailnet-name.ts.net

3. Or Use Tailscale Funnel (Public Access)

Funnel allows public access with Tailscale auth:

# Expose with Funnel (public + Tailscale auth)
tailscale funnel 8080

# Now accessible at: https://moltbot-server.tailnet-name.ts.net

Access Control

Team ACLs

Control who can access your gateway:

{
  "acls": [
    {
      "action": "accept",
      "src": ["group:developers"],
      "dst": ["tag:moltbot-gateway:8080"]
    }
  ],
  "tagOwners": {
    "tag:moltbot-gateway": ["autogroup:admin"]
  }
}

User-Level Access

{
  "acls": [
    {
      "action": "accept",
      "src": ["[email protected]", "[email protected]"],
      "dst": ["tag:moltbot-gateway:*"]
    }
  ]
}

Integration with Moltbot

Gateway Configuration

{
  "gateway": {
    "bind": "127.0.0.1",
    "port": 8080,
    "trustedProxies": ["100.64.0.0/10"]
  }
}

Client Access

From any device on your Tailnet:

# Access your gateway
curl https://moltbot-server.tailnet-name.ts.net/health

# Or configure Moltbot client
moltbot config set gateway https://moltbot-server.tailnet-name.ts.net

Pricing

Plan	Users	Monthly Cost
Personal	1	Free
Personal Pro	2	$5/user
Team	Unlimited	$6/user
Enterprise	Unlimited	Custom

For most Moltbot deployments, the free Personal plan is sufficient.

Get Started

1. Sign up for Tailscale (free)
2. Install on your gateway server
3. Configure Serve or Funnel
4. Access securely from anywhere

---

Related Guides:

• Gateway Hardening Guide
• Network Security Best Practices