Built in Tailscale integration has been removed

It didn't work well anyways. Its a waste of devs' time to support it and I'm shocked this didn't happened sooner. Just give people a guide to install real Tailscale on the main site and then you're done.

I just hope now the devs are more focused on implementing some more important features with this out of the picture

1 Like

Should Remote streaming still work if you’ve never enabled Tailscale nor ever used Tailscale?

Yes because that doesn't involve tailscale at all. You're just forwarding a port on your router

If you have CGNAT-d ISP, then you'll need Tailscale

What is this?

I just read your edit and understand what it's for now. I'm not sure why you removed the description of what this tutorial was for, as it's not clear at all without it.

Please remove this from the thread and post it to it's own new topic, as it will be more useful on its own topic, then just simply link to it from here.

3 Likes

See here how to run Channels as a service with Tailscale, which will allow you to use a unique host name as well as tailnet IP address for Channels without having to manually type a port each time you want to access it remotely.

Thank you for this move- better safe than sorry …only took about 15 minutes to get back on Tailscale

1 Like

Any plans to make this work through a reverse proxy?

I don't see how that can really be possible at all.
They would have to essentially allow for the out-of-home streaming that works through forwarding a port to authenticate through a reverse proxy. So there would have to be some way of doing that on their end.
Clients also would have to individually support that as well and recognize your reverse proxy domain as being a legitimate out-of-home domain instead of my.channelsdvr.net, which is what I assume it's coded to. I don't know for sure because it's closed source. The main issue with what you're suggesting is that using a reverse proxy with this is inherently dangerous because there's no authentication unless you use the Channels out-of-home authentication with a code, which obviously would not work in any client. It would just work in the web app. There's also Cloudflare Tunnels, and I believe, I forgot what it's called, but Cloudflare does have an authentication service that can run on top of an app, but that would also break being able to connect to a client, of course.

That's why you need something like Tailscale and the suggestion I implemented with a service which would allow you to use it anywhere you're on your tailnet with a clean hostname and zero trust security, as well as being behind a VPN with no authentication to worry about. It really just needs Tailscale on the host machine, not necessarily on the actual Channels instance itself. As long as this is on the host machine, you just follow my instructions, and it's very simple to do, and you have a domain just for Channels within your tailnet. It's actually better than the other implementation for one reason, particularly being when accessing Channels through the web UI, you get a full HTTPS, which is nice. When accessing Channels through a TV or whatever, it just falls over to HTTP 8089, which is normal.

2 Likes

That’s kinda the reason why I asked if there were plans to make it work with a reverse proxy. Not asking if there’s a way to do it right now. Works with Plex so no reason the devs can’t make it work with Channels.

Plus I think your method violates tailscale’s terms of use. If you’re doing what I think you’re doing.

I think you have no idea what you're talking about. It does not violate Tailscale's terms of use to set up a service. I am not using Tailscale Funnel, I'm using Tailscale Serve. There's a huge difference with that. It's two different things. You have no clue what you're referring to. I'm sorry.

Before accusing someone of violating a TOS, maybe research what you're talking about.

1 Like

Why so hostile? I said if you're doing what I think you are. Which you are not, so cool. All I asked was about using a reverse proxy to the devs. I use it with other stuff so would like to use it with Channels as well. No harm in having other options right?

Channels don't support reverse proxies. I tried to get it working with tsbridge but I couldn't view a channel from it. Other users had the similar struggles.

If you need more security if you're forwarding your ports on your router, then just enable 2FA. Otherwise, you can use tailscale

I have CGNAT so port forwarding isn't an option for me. I've gotten all my services working through Pangolin. Only one I can't so far is Channels. I mean I can but then there's the authentication/token thing so it's not so convenient. I have been using Tailscale. But just wondering if the devs would look into a reverse proxy option that's all. Not trying to cause any trouble.

You'll have to get a vote in on that front by opening a thread in the feature request section

Just note: devs in the past have refused to implement reverse proxies but they (probably) can be swayed if theres enough demand.

1 Like

I have never used Tailscale.
I have only ever used Wireguard VPN back to my home netowrk.
Previously Via PiVPN (u can install in on any Linux distro)
Or lately, since i have Ubiquiti Hardware Gateway, Teleport VPN, or Wireguard VPN option

Just install Tailscale on the same machine you are running the Channels DVR on and access it with the 8089 port.

1 Like

Any technical reason for them not wanting to implement reverse proxy? Tailscale is great if it's your device. But if you want to let your friends or someone that's not technical use your cDVR temporarily it's a little too complicated for some.

You have to ask the devs themselves @eric @maddox

I'm not one of them :smiley:

1 Like

You are entirely wrong.
Actually, a reverse proxy is more complicated than Tailscale. This just shows that you might not know much about Tailscale.

Simply put, all you would do is take the device hosting Channels DVR, click the share button, type in the individual's email that you want to share with, and magically they have access to that device. All they have to do is sign in with their Gmail account with a button, and they magically have a Tailscale account with no effort on their part.

Then, put simply, they insert the IP address from Tailscale as you normally would with Tailscale into their Channels DVR client, and they're done. And you've clicked one button, they've clicked one button, and that's it. If they're using an Apple TV or Android TV device, all they have to do is install Tailscale on that device from the Play Store, App Store, or whatever. It takes all of 10 seconds, and I believe they sign in with a QR code. It's that simple. I have this set up for my mom. It's not hard.

A reverse proxy is simply a worse solution, and without proper authentication, it's more than less secure because it's exposed to the internet effectively, whereas Tailscale is a zero-trust VPN and is significantly more secure. So what you're asking for is a really bad solution as it currently stands.

Lastly, if you want them to only have access to that specific port and only Channels rather than the entire device, you can go ahead and violate Tailscale's terms of service by viewing my post that explains how to set up a Tailscale service, and then go ahead and just simply grant an ACL to that one service, which is simply very easy to do on your part and zero effort on their part.

1 Like