Reaching your apps from anywhere, the easy way

By Raviteja KNTSUpdated July 9, 2026

The obvious way to reach your apps from outside, opening a hole in your router to the internet, is also the one most likely to get you hacked. There's a far easier and safer way that I reach for every time: Tailscale. It makes your phone and your server behave as if they're on the same home network, wherever you are.

The trick is that nothing gets exposed to the public internet at all. Tailscale builds a small private network just between your own devices. Your apps stay invisible to everyone else, but you can reach them from your laptop on hotel Wi-Fi as if you were sitting at home.

Setting it up

You make a free Tailscale account, then install it on the server and on any device you want to reach it from. On the server:

curl -fsSL https://tailscale.com/install.sh | sh
sudo tailscale up

That second command prints a link; open it, log in, and the server joins your private network. Then install the Tailscale app on your phone and laptop and log in with the same account. That's it, they can all see each other now.

Tailscale gives the server its own address on this private network. Run tailscale ip -4 on the server to see it, and with MagicDNS the machine's plain name works too, DNS doing its phonebook job with zero setup on your side. So from a hotel on the other side of the world, the whiteboard you installed is just http://server-name:3030 in your phone's browser. No ports opened, no router touched.

The other options, honestly

You'll run into these, so here's where each fits. Cloudflare Tunnel is the pick when you want an app genuinely public, say a blog other people visit, without opening your router. It needs a domain name and points the public at your app through Cloudflare. Great for sharing, more than you need for private access.

WireGuard is the technology Tailscale is built on. You can run it yourself for the same private-network result, but you're doing by hand what Tailscale automates. Worth knowing exists; not where I'd start.

Port forwarding plus a domain is the old-school route: open a port on your router, point a domain at your home connection with dynamic DNS, and usually put a reverse proxy with HTTPS in front. It works, and it's how public self-hosting was done for years, but it exposes your apps directly to the internet, which means every one of them has to be locked down and kept patched. For a beginner, that's a lot of risk for something Tailscale solves in ten minutes.

At this point you've got the full picture: a server, apps, storage, backups, and access both at home and away. Let's put the whole thing together in one go and host a real app start to finish.