This guide outlines steps to connect to Synology NAS services (e.g. Synology Drive) via Tailscale.
The goal is to preserve Tailscale as the single point-of-public-entry for your Synology NAS, while enabling e.g. HTTPS certificates.
- Create a Tailscale account
- Install Tailscale onto your Synology NAS
Enable HTTPS for your tailnet.
- Configure your Synology NAS to generate and use Tailscale-provided certificates
- In your Synology NAS's web UI, go to Control Panel > Security > Certificate > Settings, then choose the Tailscale-provided certificate for every listed service (note: this configures ~all direct HTTPS requests to use the Tailscale certificate, which you may not want)
On your device of choice, e.g. a personal laptop:
- Copy your Synology NAS's fully qualified Tailscale domain name
- In a browser, visit the HTTPS version of that Tailscale domain name, e.g.
https://YOUR_DOMAIN_NAME
- Ensure you can log in and the connection is listed as "secure"
Finally, consider repeating a similar test for desktop applications like Synology Drive.