Mesh VPN (Tailscale-compat)
Mesh VPN (Tailscale-compat) is a app in the osFoundry community catalog. Self-hosted control plane for Tailscale clients — your own coordination server, your devices use the official Tailscale clients to form a mesh VPN. ACLs, magic DNS, subnet routing. Powered by Headscale. Ships as a thin wrapper around the upstream image.
Details
- Workspace: osfoundry
- Category: COMMUNICATION
- Pricing: Free
- Access: Community
Features
- Self-hosted control plane for Tailscale clients — your own coordination server
- Your devices use the official Tailscale clients to form a mesh VPN
Documentation
# Mesh VPN (Tailscale-compat)
Self-hosted Tailscale control plane, powered by Headscale.
## Architecture note — this app is the **coordination plane** only
Headscale runs the **control plane** (TCP-based: HTTPS / gRPC for client registration + ACL distribution). Your client devices form **direct or DERP-relayed peer-to-peer WireGuard connections** (UDP) using the **official Tailscale clients**.
- ✅ The coordination plane (this room app) runs fine on TCP-only container infra
- ⚠️ The data plane (UDP WireGuard between your devices) is direct device-to-device; it doesn't transit this container
- ✅ Tailscale's DERP relays (TCP-based fallback) handle clients behind strict NATs
So this is **one of the few VPN/networking apps that actually works well on container infra**.
## Features
- Drop-in Tailscale-control-plane replacement
- Use the official Tailscale clients (Linux / macOS / Windows / iOS / Android / Apple TV / Synology)
- ACLs (Headscale uses Tailscale's HuJSON ACL format)
- Magic DNS (`device.tail-net.ts.net` style names)
- Subnet routing + exit nodes
- API + CLI for user/node management
## Packaging
Thin wrapper around the official `headscale/headscale:latest` image. Config + Postgres-or-SQLite DB at `/var/lib/headscale`.
How to use Mesh VPN (Tailscale-compat) in osFoundry
Install Mesh VPN (Tailscale-compat) into your workspace in one click, then fork it in osStudio to customise the prompts, tools, or configuration for your stack. Anyone in your workspace can pick up where you left off.
Other apps from the community
- CRM — Customer relationship management with contacts, deals, and pipeline tracking.
- Kanban Board — Drag-and-drop task board with swimlanes, labels, and team assignments.
- Helpdesk — Ticket triage and customer support inbox with SLA tracking.
- Page Builder — Block-based page editor with publishing to public URLs.
- Website Builder — Multi-page site builder with CMS, templates, and custom domains.
- Storefront — E-commerce storefront with product catalog, cart, and checkout.