How to set up Tailscale Funnel to securely access Home Assistant from anywhere for free

Community Guides
,
21

Hi,
I’ve setup as above, but get this repeating in the logs:

[10:26:12] INFO: Service share-homeassistant exited with code 1 (by signal 0)
[10:26:13] FATAL: Unable to connect to Home Assistant as reverse proxy.

How can I fix this ?

Thanks

22

Solved.
After entering the proxy info in the configuration.yml, restarting homeassistant using the ‘quick reload’ didn’t work and resulted in the errors. Once I tried a full reboot, it worked.

23

Thanks, apparently the add-on was updated, I updated the post accordingly, and added a FAQ integrating the feedback here.

Did you do this?:

Also, may I ask what do you mean by “always logging me out from HA every few minutes”?” Do you use the mobile app to connect to HA or do you access from a browser?

24

Have tried this setup, as I had troubles in this area. The Tailscale Funnel is working, all is setup, but get following error in the logs:
2025/12/05 11:46:10 handleIngress: got ingress conn for unconfigured “XXX.raptor-istrian.ts.net:443”; rejecting

What am I doing wrong?

25

In which logs are you seeing this? Tailscale addon logs, Supervisor logs or else?

26

This error I get in the log files of the Tailscail addons

27

If it’s working and you can access your HA remotely I wouldn’t mind it. It seems like you tried to open the Web UI of the addon while it was not fully configurated or similar.

28

What can I do if Tailscale is setup already as “serve”? Do my Family Members have to re authenticate or will it just work when I use “funnel” with above explained settings?

29

I don’t use Tailscale Serve, but reading the docs it seems it’s quite different from Funnel. Funnel exposes HA to the public internet while Serve exposes it to devices connected to your Tailscale VPN (a.k.a tailnet).

When you switch to Funnel, your family members will probably need to change link of HA in their HA mobile apps and re-authenticate. Also, don’t forget that tunnel exposes your HA to the public internet, so ensure every family member sets a strong password and if possible 2FA for their HA logins.

If your family is already comfortable with accessing HA using Serve there’s little to no reason to switch to Funnel, since you trade-off some amount of security with convenience.

1 Like
30

Thank You for your help parhelion!

1 Like
32

Thanks @123 very much the voice of reason here.
I was just about to go the funnel route. But good to pause and read this thread. The small overhead of installing Tailscale on the family’s iPhones is well worth the effort compared to trying to troubleshoot Hacker-induced ghost-switching in the middle of the night :blush:

1 Like
33

Thank you for this great guide!

A few suggestions which can be helpful for other people

  • as a beginner i didn’t know how to update the configuration.yaml. I managed to do that with the Studio Code Server addon
  • maybe restarting HA at the end can help
  • tailscale might take 2-3 minutes to sync at the end of the guide. So after logging in step 9, if the new tailscale " <device_name>..ts.net " url is not working, take a few minutes off before worrying and touching things around
1 Like
34

Thanks for the feedback, I integrated it to the guide.

1 Like
35

Thanks so much for the write-up… works perfectly via web browser on my mac but the HA iOS app on cellular (not my home wifi) is failing to connect instantly. I’ve logged off and back in, removed my home and re-added in the iOS app, etc. and on my home network, directly it connects just fine. As soon as I shut off wifi and I’m on cell service, it won’t connect and fails immediately. On my laptop I can get to the tailnet funnel url directly just fine and am logging in. I’ve verified a few times now that the external address is correct for my tailnet external funnel address.

What am I missing here? Any help would be greatly appreciated, thank you!

Edit - disregard… seems having TS installed and running on my pihole just as an end point was causing some issues… not sure why but when I shut down ts on pihole, everything is working as intended… seemed to be some sort of DNS issue.

37

Hey everybody, as of 04-02-2026 I’m seeing connectivity issues. I’ve worked on to diagnose the issue and it seems that it’s on Tailscale’s end. The specific log is:

2026/02/04 20:35:45 Drop: TCP{[fd7a:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx]:47896 > [fd7a:xxxx:xxxx::xxxx:xxxx]:49212} 80 no rules matched

This gets logged every time I try to connect.

In the Tailscale admin page the node is shown as online and it’s indeed online. Just the Funnel part doesn’t work. The following doesn’t help:

  • Restarting the Tailscale add-on
  • Rebooting the host system
  • Uninstalling/reinstalling the add-on
  • Installing an older version of the add-on

This is the first time this happened.

UPDATE: Apparently a bunch of people are having the same issue today, it’s on Tailscale’s side, see this issue. If you can post your bug report ID there it can help. You can generate a bug report ID by first setting log_level to debug in addon configuration and then running /opt/tailscale bugreport inside the addon container.

38

i was just wondering what ip address in need to put in the confing/yaml

39

Do you mean here?

It doesn’t change, it’s the same for every setup: 127.0.0.1

40

Hi I have tried everithing, for hours but it doesn’t works. probably I dont giver the right address to reach the homeassistant server. It works with tailscale activated but it doesn’t work if I colose tailscale on the machine I try to access my homeassistant. any ideas?