# TSDProxy

TSDProxy is a Tailscale proxy for Docker containers that automatically creates Tailscale machines for labeled containers, providing automatic HTTPS, dynamic lifecycle management, and a real-time dashboard without. It is open source and self-hosted, installable on Docker Hub and Unraid.

Canonical page: https://ourlocalhost.com/app/914/tsdproxy

## Description

TSDProxy is a Tailscale proxy for Docker containers that automatically creates Tailscale machines for labeled containers, providing automatic HTTPS, dynamic lifecycle management, and a real-time dashboard without requiring sidecar containers.

## Platform availability

Available on 1 of 9 platforms: Unraid.

## Health score

74/100 (Good), based on 3 of 4 factors.
- Maintained: 100 (last commit 16 days ago)
- Popular: 65 (1,713 GitHub stars)
- Easy to install: 35 (1 install platform, install notes, Docker image)

## Links

- GitHub: https://github.com/almeidapaulopt/tsdproxy
- Docker Hub: https://hub.docker.com/r/almeidapaulopt/tsdproxy
- Official website: https://almeidapaulopt.github.io/tsdproxy
- Unraid: https://ca.unraid.net/apps/tsdproxy-13ccczd1906frp?q=TSDProxy

## Common questions

### What Docker setup details can prevent TSDProxy from exposing a container?

Keep the /var/run/docker.sock mount and add tsdproxy.enable and tsdproxy.name labels to the container. TSDProxy needs both the Docker socket and the labels to show and expose apps.

### Where is TSDProxy configuration stored, and what should I back up?

TSDProxy creates and reads /config/tsdproxy.yaml from the host folder mapped to /config. Back up that config folder, because deleting or losing it loses the proxy setup; file changes are picked up automatically.

### Can TSDProxy proxy TCP and UDP services, not just HTTP?

Yes, it can proxy TCP services such as SSH or databases and UDP traffic alongside HTTP/HTTPS. It also supports port ranges in a single label, for example 2222-2230/tcp.

### How does TSDProxy know where to route traffic to the Docker host?

It connects to the Docker daemon via the socket or a remote host and routes traffic to container IPs on the Docker network. The targetHostname setting, typically host.docker.internal, tells it where to reach the Docker host.

## Alternatives

- Caddy: Caddy is an extensible web server and reverse proxy that serves Transport Layer Security (TLS) by default, making it simple to secure and r…
- Træfik Proxy: The Cloud Native Application Proxy Simplify networking complexity while designing, deploying, and operating applications.

---
Source: Our Local Host (https://ourlocalhost.com/app/914/tsdproxy), the self-hosted and open-source app directory.