> ## Documentation Index
> Fetch the complete documentation index at: https://docs.b1e55ed.permanentupperclass.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Tailscale Setup

> Privately expose the API and dashboard over your tailnet.

Tailscale is the recommended way to access b1e55ed remotely without exposing ports publicly.

* API default: `:5050`
* Dashboard default: `:5051`

***

## Install

On your VPS:

```bash theme={null}
curl -fsSL https://tailscale.com/install.sh | sh
```

***

## Authenticate

```bash theme={null}
sudo tailscale up
```

Follow the login URL and approve the device.

***

## Get your node IP

```bash theme={null}
tailscale ip -4
```

Example output:

```text theme={null}
100.64.12.34
```

***

## Bind b1e55ed to Tailscale

### Option A (recommended): bind explicitly to the Tailscale IP

Set `api.host` and `dashboard.host`:

```yaml theme={null}
# config/user.yaml
api:
  host: "100.64.12.34"
  port: 5050

dashboard:
  host: "100.64.12.34"
  port: 5051
```

### Option B: bind to `0.0.0.0` and rely on ACLs/firewall

```yaml theme={null}
api:
  host: "0.0.0.0"

dashboard:
  host: "0.0.0.0"
```

<Note>
  Only use `0.0.0.0` if you understand your firewall and you’re confident ports are not exposed on the public interface.
</Note>

***

## Firewall guidance

* Only expose ports **5050/5051** on the **Tailscale interface**
* Block access on the public interface
* Prefer Tailscale ACLs for team access

***

## Access from your laptop

Open:

```text theme={null}
http://<tailscale-ip>:5051
```

No extra VPN configuration required—Tailscale handles routing.