Skip to content
HearthworkHearthwork

From anywhere with Tailscale

Tailscale is a WireGuard-based private network between your own devices. It is optional. Without it, nothing changes.

Install Tailscale and sign in on both computers, then:

Terminal window
hearthwork share --tailscale   # on the model computer
hearthwork connect             # on the other one: lists LAN hosts and Tailscale peers "(tailscale)"

Host

Section titled “Host”

share prints the Tailscale address and the MagicDNS name. With --tailscale, the host accepts only Tailscale and local computers (plus your local network when no network is Public).

Client

Section titled “Client”

connect also asks every online Tailscale peer, so you do not need to know an address. Pairing stores every address of the host. Each run tries the local network first, then Tailscale, so the same key works at home and away. hearthwork status shows the route in use.

Security

Section titled “Security”

Tailscale traffic is encrypted end to end, and only devices of your tailnet can reach the host. The PIN and device keys still apply, because a tailnet can be shared with other people. See Use the model from another computer for how pairing works.