- name
- tailscale-manager
- description
- >
- dependencies
Tailscale Manager
Secure Tailscale network management with automatic IP masking.
Usage
python3 scripts/tailscale_ctrl.py status # Network overview
python3 scripts/tailscale_ctrl.py devices # Connected devices
python3 scripts/tailscale_ctrl.py ip # This device's IPs
python3 scripts/tailscale_ctrl.py ping <host> # Ping a device
python3 scripts/tailscale_ctrl.py netcheck # Network diagnostics
python3 scripts/tailscale_ctrl.py serve-status # Current serve config
python3 scripts/tailscale_ctrl.py whois <ip> # Who is this IPAll commands support --json for structured output.
Security
- Command whitelist: Only safe read-only commands (
status,ip,ping,netcheck,whois,serve-status) - No write access: Cannot modify serve/funnel config, change ACLs, or administer tailnet
- IP masking: Public IPs automatically replaced with
[IP-MASKED] - No auth keys: Never accesses or exposes Tailscale auth keys
- No secrets: Does not read config files or tokens
What's Masked
| Kept | Masked |
|---|---|
| Tailscale IPs (100.x.x.x) | Public IPs |
| DNS names | External IPs |
| Online/offline status | — |