TalkTerm
← Back to guides

Reach remote agents privately with Tailscale

Connect TalkTerm to a VPS, Mac, or another agent host without publishing SSH or agent services to the internet.

A private mesh network for your own devices. Gives the agent host a stable private name and policy-controlled access.

Reach SSH without putting a port on the public internet.
Mac mini and server rack representing a remote agent hostAgent hostMac · PC · VPS
Tailscale + SSH
TalkTerm on iPhoneTalkTermiPhone · iPad

Put both ends in one tailnet

Install Tailscale on the agent host and on the iPhone or iPad. Once connected, MagicDNS gives the host a stable private name that TalkTerm can save as its SSH destination.

Allow less, not more

Use Tailscale grants to allow only the required users or devices to reach the agent host. A narrow SSH rule is easier to reason about than broad access to every port.

Choose the SSH model

  • Standard SSH over Tailscale keeps your existing SSH keys and host-key flow.
  • Tailscale SSH uses tailnet identity and policy instead of traditional SSH keys.
  • Pick one model deliberately and test reconnect behavior from cellular and Wi‑Fi.

Verify before relying on it

Confirm the private hostname, SSH login, and Herdr session list before adding the host to TalkTerm.

tailscale status
ssh agent-user@your-agent-host
herdr session list --json

Primary references