Tailscale Rules

Zero-config VPN and mesh networking built on WireGuard. Connect devices securely across any network without port forwarding.

3 rules

View Commands

Tailscale ACL Policy Standards

Intermediate

Enforce zero-trust ACL policy standards — deny-by-default, tag requirements, group-based access, port specificity, and mandatory ACL testing before deployment.

globs: **/tailscale/**/*.json, **/tailscale/**/*.hujson

tailscale, acl, zero-trust, security

View Rule

Device Registration & Key Management

Beginner

Standards for Tailscale device management — auth key types, ephemeral vs reusable keys, device naming, key rotation, and automated registration for infrastructure.

globs: **/.env*, **/tailscale/**

tailscale, device-management, auth-keys, security

View Rule

MagicDNS & DNS Configuration Standards

Beginner

Standards for Tailscale DNS configuration — MagicDNS naming, split DNS routing, custom search domains, and consistent service discovery across the tailnet.

globs: **/.env*, **/docker-compose*.yml, **/*.conf

tailscale, dns, magicdns, service-discovery

View Rule