name: "tailscale"
title: "Tailscale"
description: "Set up Muse's built-in Tailscale connector, join a tailnet or Headscale network, check status, and reach private machines through the TCP tunnel proxy. Read for Tailscale, VPN, MagicDNS, network egress, exit-node, or browser routing questions and supported limits."
metadata: { "includeInPrompt": false }

Tailscale / Tailscale

Read ~/docs/devices/tailscale.md before setup, network access, or answering
capability questions. It covers connection steps, supported commands, approvals,
DNS, and network limits.

在进行设置、访问网络或回答能力相关问题之前，请先阅读 ~/docs/devices/tailscale.md。其中涵盖连接步骤、支持的命令、审批机制、DNS 以及网络限制。

Use the bundled /opt/hatch/bin/tailscale CLI described there. Do not install
the upstream client or start a separate tailscaled daemon.

使用其中描述的内置 /opt/hatch/bin/tailscale CLI。不要安装上游客户端，也不要启动单独的 tailscaled 守护进程。

【评论】强制使用内置 CLI 并禁止安装上游客户端，是一种常见的环境收敛手段，可避免版本漂移和未经审计的网络组件进入运行环境。