← Back

Tailscale mesh

Live

Signature capability

Five machines across three continents behave like one private LAN over Tailscale — I SSH to any of them by name, and each carries a dedicated role in the stack.

What it is

My systems run across a small fleet of servers joined into a single private network with Tailscale, so I reach every box by a stable name from anywhere without exposing it to the public internet. A development Mac drives the work; a Linux-on-MacBookPro node runs the Scout agent and the WhatsApp bridge; a Hostinger VPS is the Kaleo AI hub (assistant, LLM router, Discord); an InterServer box runs live trading; and a Contabo box is a fast auxiliary assistant. SSH, VNC, and service-to-service calls all ride the mesh, with launch agents and systemd services keeping the tunnels and daemons up across reboots.

Highlights

  • Mac (dev) — primary development machine and orchestrator.
  • mbp-server (Linux on a MacBookPro14,1) — Scout agent in tmux plus the WhatsApp bridge as a lingering systemd user service.
  • Hostinger VPS — the Kaleo AI hub: WhatsApp/Discord assistant, Pulse LLM router, n8n automations.
  • InterServer (quantpod) — live trading host.
  • Contabo — fast auxiliary assistant node.
  • All five joined over Tailscale and reachable by name; tunnels and services auto-restart across reboots via launchd/systemd.

Tech · Tailscale mesh VPN, SSH (with jump-host fallback), autossh tunnels, systemd + launchd service management, wayvnc/VNC over the tailnet, Debian + macOS hosts.

Download brief (PDF)