Architecture Réseau
Vue d'ensemble
Composants
Tailscale
VPN mesh reliant tous les appareils de la famille.
| Machine | IP Tailscale | OS |
|---|---|---|
| talloires | 100.116.198.105 | Raspberry Pi 5 (Debian) |
| annecy | 100.118.210.128 | Synology DS620slim |
| olympou | 100.125.242.58 | macOS |
| pentamodi | 100.78.237.78 | iOS |
| perce | 100.69.7.78 | tvOS (Apple TV) |
Tailnet: tailfd281f.ts.net
dnsmasq
Serveur DNS local sur Talloires, résout les domaines internes.
Config: /etc/dnsmasq.d/tailscale.conf
Commandes:
cloudflared
Proxy DNS-over-HTTPS vers AdGuard DNS avec profil personnel.
Config: /etc/cloudflared/config.yml
Commandes:
Configuration Tailscale Admin
Dans Tailscale Admin Console → DNS → Nameservers :
- Global nameserver: 100.116.198.105 (Talloires)
- Override local DNS: activé
Cela force tous les appareils Tailscale à utiliser dnsmasq sur Talloires.
Domaines
| Domaine | Usage |
|---|---|
*.talloires.local |
Services sur Talloires (recommandé) |
*.talloires.tailfd281f.ts.net |
Alternative Tailscale |
go |
Raccourcis Shlink |
Dépannage
Test résolution DNS
Server: 100.116.198.105 Address: 100.116.198.105#53
Name: go Address: 100.116.198.105
Server: 100.116.198.105 Address: 100.116.198.105#53
Name: docs.talloires.local Address: 100.116.198.105
Server: 100.116.198.105 Address: 100.116.198.105#53
Non-authoritative answer: Name: google.com Address: 142.250.27.138 Name: google.com Address: 142.250.27.100 Name: google.com Address: 142.250.27.101 Name: google.com Address: 142.250.27.102 Name: google.com Address: 142.250.27.113 Name: google.com Address: 142.250.27.139
Services ne répondent pas
- Vérifier que dnsmasq tourne:
sudo systemctl status dnsmasq - Vérifier que cloudflared tourne:
sudo systemctl status cloudflared-dns - Vérifier que Caddy tourne:
docker ps | grep caddy