{"id":11045,"date":"2026-04-14T16:29:53","date_gmt":"2026-04-14T16:29:53","guid":{"rendered":"https:\/\/bitep.net\/blog\/2026\/04\/14\/ubuntu-24-04-tailscale-setup-tutorial\/"},"modified":"2026-04-14T16:32:36","modified_gmt":"2026-04-14T16:32:36","slug":"ubuntu-24-04-tailscale-setup-tutorial","status":"publish","type":"post","link":"https:\/\/bitep.net\/blog\/2026\/04\/14\/ubuntu-24-04-tailscale-setup-tutorial\/","title":{"rendered":"Ubuntu 24.04-d\u0259 Tailscale nec\u0259 qurulur? Uzaq giri\u015f \u00fc\u00e7\u00fcn sad\u0259 tailnet setup"},"content":{"rendered":"<p>\u018fg\u0259r Ubuntu 24.04 serveriniz\u0259 uzaqdan t\u0259hl\u00fck\u0259siz giri\u015f a\u00e7maq, evd\u0259ki komp\u00fcter\u0259 sabit \u015f\u0259kild\u0259 qo\u015fulmaq v\u0259 ya public IP \/ port forward d\u0259rdi olmadan \u015f\u0259xsi \u015f\u0259b\u0259k\u0259 qurmaq ist\u0259yirsinizs\u0259, Tailscale \u00e7ox praktik h\u0259ll\u0259rd\u0259n biridir. O, WireGuard \u0259sasl\u0131 i\u015fl\u0259yir, amma \u0259l il\u0259 a\u00e7ar, peer v\u0259 konfiqurasiya idar\u0259 etm\u0259k \u0259v\u0259zin\u0259 i\u015fi xeyli sad\u0259l\u0259\u015fdirir. Bu yaz\u0131da Ubuntu 24.04-d\u0259 Tailscale qura\u015fd\u0131r\u0131lmas\u0131n\u0131, ilk qo\u015fulman\u0131, status yoxlamas\u0131n\u0131 v\u0259 Tailscale SSH \u00fc\u00e7\u00fcn \u0259sas add\u0131mlar\u0131 g\u00f6st\u0259r\u0259c\u0259y\u0259m.<\/p>\n<h2>Tailscale n\u0259dir v\u0259 n\u0259 \u00fc\u00e7\u00fcn faydal\u0131d\u0131r?<\/h2>\n<p>Tailscale m\u00fcxt\u0259lif cihazlar\u0131 eyni private \u015f\u0259b\u0259k\u0259y\u0259 salma\u011fa k\u00f6m\u0259k edir. Server, laptop, telefon v\u0259 ya cloud instansiyan\u0131z bir tailnet daxilind\u0259 bir-birin\u0259 t\u0259hl\u00fck\u0259siz \u015f\u0259kild\u0259 qo\u015fula bilir. X\u00fcsusil\u0259 a\u015fa\u011f\u0131dak\u0131 ssenaril\u0259rd\u0259 \u00e7ox faydal\u0131d\u0131r:<\/p>\n<ul>\n<li>server\u0259 public SSH portu a\u00e7madan qo\u015fulmaq<\/li>\n<li>evd\u0259ki v\u0259 ofisd\u0259ki cihazlara uzaq giri\u015f verm\u0259k<\/li>\n<li>m\u00fcv\u0259qq\u0259ti admin giri\u015fi \u00fc\u00e7\u00fcn daha t\u0259hl\u00fck\u0259siz yol qurmaq<\/li>\n<li>bird\u0259n \u00e7ox serveri eyni privat \u015f\u0259b\u0259k\u0259d\u0259 birl\u0259\u015fdirm\u0259k<\/li>\n<\/ul>\n<h2>Bu tutorial kim \u00fc\u00e7\u00fcnd\u00fcr?<\/h2>\n<ul>\n<li>Ubuntu 24.04 VPS v\u0259 ya dedicated server i\u015fl\u0259d\u0259nl\u0259r<\/li>\n<li>SSH giri\u015fini daha t\u0259hl\u00fck\u0259siz etm\u0259k ist\u0259y\u0259nl\u0259r<\/li>\n<li>WireGuard-\u0131n rahat idar\u0259 olunan variant\u0131n\u0131 axtaranlar<\/li>\n<li>Tailscale il\u0259 ilk d\u0259f\u0259 tan\u0131\u015f olan sistem adminl\u0259ri v\u0259 developer-l\u0259r<\/li>\n<\/ul>\n<h2>Ba\u015flamazdan \u0259vv\u0259l laz\u0131m olanlar<\/h2>\n<ul>\n<li>Ubuntu 24.04 i\u015fl\u0259y\u0259n server<\/li>\n<li>sudo h\u00fcquqlu istifad\u0259\u00e7i<\/li>\n<li>Tailscale hesab\u0131, ad\u0259t\u0259n Google, Microsoft, GitHub v\u0259 ya ba\u015fqa SSO provider il\u0259 a\u00e7\u0131l\u0131r<\/li>\n<li>serverd\u0259 internet \u00e7\u0131x\u0131\u015f\u0131<\/li>\n<\/ul>\n<h2>1. Sistemi yenil\u0259yin<\/h2>\n<pre><code>sudo apt update &amp;&amp; sudo apt upgrade -y<\/code><\/pre>\n<p>Bu add\u0131m m\u0259cburi deyil, amma paket konfliktl\u0259ri v\u0259 k\u00f6hn\u0259 as\u0131l\u0131l\u0131qlardan qa\u00e7maq \u00fc\u00e7\u00fcn yax\u015f\u0131 praktikad\u0131r.<\/p>\n<h2>2. Tailscale-i qura\u015fd\u0131r\u0131n<\/h2>\n<p>Tailscale Linux \u00fc\u00e7\u00fcn r\u0259smi install script t\u0259qdim edir. Ubuntu 24.04 d\u0259 bu d\u0259st\u0259y\u0259 daxildir.<\/p>\n<pre><code>curl -fsSL https:\/\/tailscale.com\/install.sh | sh<\/code><\/pre>\n<p>Bu komanda r\u0259smi repository v\u0259 paketi qurur. \u018fg\u0259r <code>curl | sh<\/code> yana\u015fmas\u0131n\u0131 ist\u0259mirsinizs\u0259, Tailscale Packages s\u0259hif\u0259sind\u0259 Ubuntu 24.04 \u00fc\u00e7\u00fcn manual paket qura\u015fd\u0131rma add\u0131mlar\u0131n\u0131 da istifad\u0259 ed\u0259 bil\u0259rsiniz.<\/p>\n<h2>3. Xidm\u0259ti i\u015f\u0259 sal\u0131n v\u0259 tailnet-\u0259 qo\u015fun<\/h2>\n<pre><code>sudo tailscale up<\/code><\/pre>\n<p>Bu \u0259mr terminalda siz\u0259 login URL ver\u0259c\u0259k. Linki brauzerd\u0259 a\u00e7\u0131n, hesab\u0131n\u0131zla t\u0259sdiql\u0259yin v\u0259 cihaz\u0131 tailnet-\u0259 \u0259lav\u0259 edin.<\/p>\n<p>\u018fg\u0259r server\u0259 birba\u015fa browser eri\u015fiminiz yoxdursa, h\u0259min linki lokal komp\u00fcterd\u0259 a\u00e7maq kifay\u0259tdir.<\/p>\n<h2>4. Qo\u015fulman\u0131n u\u011furlu oldu\u011funu yoxlay\u0131n<\/h2>\n<pre><code>tailscale status<\/code><\/pre>\n<p>Burada cihaz\u0131n tailnet daxilind\u0259 g\u00f6r\u00fcnd\u00fcy\u00fcn\u00fc v\u0259 dig\u0259r cihazlar\u0131n siyah\u0131s\u0131n\u0131 g\u00f6r\u0259 bil\u0259rsiniz.<\/p>\n<p>\u00d6z Tailscale IP \u00fcnvan\u0131n\u0131z\u0131 yoxlamaq \u00fc\u00e7\u00fcn:<\/p>\n<pre><code>tailscale ip -4\ntailscale ip -6<\/code><\/pre>\n<p>Ad\u0259t\u0259n dig\u0259r Tailscale cihazlar\u0131 bu IP v\u0259 ya MagicDNS ad\u0131 il\u0259 siz\u0259 qo\u015fula bilir.<\/p>\n<h2>5. Server\u0259 Tailscale \u00fcz\u0259rind\u0259n SSH qo\u015fulun<\/h2>\n<p>\u018fg\u0259r laptopunuz v\u0259 serveriniz eyni tailnet-d\u0259dirs\u0259, server\u0259 art\u0131q Tailscale IP-si v\u0259 ya cihaz ad\u0131 il\u0259 qo\u015fula bil\u0259rsiniz:<\/p>\n<pre><code>ssh user@100.x.y.z<\/code><\/pre>\n<p>v\u0259 ya MagicDNS aktivdirs\u0259:<\/p>\n<pre><code>ssh user@server-name<\/code><\/pre>\n<p>Bu yana\u015fman\u0131n \u00fcst\u00fcnl\u00fcy\u00fc odur ki, public internet\u0259 22 portunu a\u00e7madan da idar\u0259etm\u0259 m\u00fcmk\u00fcn olur.<\/p>\n<h2>6. \u0130st\u0259s\u0259niz Tailscale SSH-i aktiv edin<\/h2>\n<p>Tailscale docs daxilind\u0259 Linux cihazlarda Tailscale SSH aktivl\u0259\u015fdirm\u0259k d\u0259 t\u00f6vsiy\u0259 olunur. Bu halda giri\u015f daha m\u0259rk\u0259zl\u0259\u015fdirilmi\u015f v\u0259 policy \u0259sasl\u0131 idar\u0259 oluna bil\u0259r.<\/p>\n<pre><code>sudo tailscale up --ssh<\/code><\/pre>\n<p>\u018fg\u0259r cihaz art\u0131q qo\u015fulubsa, bu flag il\u0259 yenid\u0259n i\u015fl\u0259dib SSH imkan\u0131n\u0131 aktivl\u0259\u015fdir\u0259 bil\u0259rsiniz. Sonra admin panel v\u0259 policy qaydalar\u0131 il\u0259 kimin hans\u0131 node-a qo\u015fula bil\u0259c\u0259yini idar\u0259 etm\u0259k olur.<\/p>\n<h2>7. Serverl\u0259r \u00fc\u00e7\u00fcn key expiry m\u0259s\u0259l\u0259sin\u0259 diqq\u0259t edin<\/h2>\n<p>Tailscale t\u0259hl\u00fck\u0259sizlik \u00fc\u00e7\u00fcn cihaz a\u00e7arlar\u0131n\u0131 periodik yenil\u0259yir. Amma uzun\u00f6m\u00fcrl\u00fc serverl\u0259rd\u0259 bu b\u0259z\u0259n ist\u0259nm\u0259y\u0259n k\u0259sintiy\u0259 s\u0259b\u0259b ola bil\u0259r. \u018fg\u0259r bu node daimi i\u015fl\u0259y\u0259n serverdirs\u0259, admin paneld\u0259 h\u0259min cihaz \u00fc\u00e7\u00fcn key expiry-ni s\u00f6nd\u00fcrm\u0259k m\u00fcmk\u00fcnd\u00fcr.<\/p>\n<p>Burada diqq\u0259tli olun, bu rahatl\u0131q verir, amma komprometasiya hal\u0131nda risk d\u0259 art\u0131r. Y\u0259ni bunu yaln\u0131z etibarl\u0131 serverl\u0259rd\u0259 edin.<\/p>\n<h2>8. Faydal\u0131 yoxlama \u0259mrl\u0259ri<\/h2>\n<pre><code>systemctl status tailscaled\n\ntailscale status\n\ntailscale ip -4\n\ntailscale ping &lt;other-device-name&gt;<\/code><\/pre>\n<p>Bu \u0259mrl\u0259rl\u0259 xidm\u0259tin i\u015fl\u0259diyini, cihaz\u0131n tailnet-d\u0259 oldu\u011funu v\u0259 ba\u015fqa node-larla \u0259laq\u0259ni yoxlaya bil\u0259rsiniz.<\/p>\n<h2>Tez-tez rast g\u0259lin\u0259n probleml\u0259r<\/h2>\n<h3>tailscale up i\u015fl\u0259yir, amma cihaz g\u00f6r\u00fcnm\u00fcr<\/h3>\n<p>Login linki il\u0259 auth tamamlanmay\u0131bsa, cihaz tailnet-\u0259 d\u00fc\u015fm\u0259z. Brauzerd\u0259 t\u0259sdiqi bitirdiyiniz\u0259 \u0259min olun.<\/p>\n<h3>tun kernel module x\u0259tas\u0131 \u00e7\u0131x\u0131r<\/h3>\n<p>Tailscale Linux docs-a g\u00f6r\u0259 <code>tun<\/code> modulu laz\u0131md\u0131r. \u00c7ox sistemd\u0259 default g\u0259lir, amma problem \u00e7\u0131xsa, modulun y\u00fckl\u00fc oldu\u011funu yoxlamaq laz\u0131md\u0131r.<\/p>\n<h3>SSH yen\u0259 public IP il\u0259 gedir<\/h3>\n<p>SSH \u0259mrind\u0259 Tailscale IP v\u0259 ya MagicDNS host ad\u0131ndan istifad\u0259 etdiyiniz\u0259 bax\u0131n. Adi public IP yazsan\u0131z, trafik yen\u0259 \u0259vv\u0259lki mar\u015frutla ged\u0259c\u0259k.<\/p>\n<h3>Firewall qaydalar\u0131 qar\u0131\u015f\u0131r<\/h3>\n<p>Tailscale \u00e7ox vaxt public a\u00e7\u0131q port ehtiyac\u0131n\u0131 azald\u0131r, amma lokal firewall v\u0259 cloud security group qaydalar\u0131 yen\u0259 d\u0259 sistem\u0259 t\u0259sir ed\u0259 bil\u0259r. X\u00fcsusil\u0259 \u00e7\u0131x\u0131\u015f trafikini h\u0259dd\u0259n art\u0131q m\u0259hdudla\u015fd\u0131rm\u0131s\u0131n\u0131zsa, bunu yoxlay\u0131n.<\/p>\n<h2>Tailscale n\u0259 vaxt daha m\u0259ntiqlidir?<\/h2>\n<p>\u018fg\u0259r siz\u0259 tam \u0259l il\u0259 WireGuard konfiqurasiyas\u0131 yox, daha s\u00fcr\u0259tli v\u0259 rahat idar\u0259 olunan private ba\u011flant\u0131 laz\u0131md\u0131rsa, Tailscale \u00e7ox g\u00fccl\u00fc se\u00e7imdir. Ki\u00e7ik komandalarda, \u015f\u0259xsi serverl\u0259rd\u0259, homelab m\u00fchitl\u0259rind\u0259 v\u0259 cloud admin i\u015fl\u0259rind\u0259 xeyli vaxt qazand\u0131r\u0131r.<\/p>\n<h2>N\u0259tic\u0259<\/h2>\n<p>Ubuntu 24.04-d\u0259 Tailscale qura\u015fd\u0131rmaq \u00e7\u0259tin deyil. R\u0259smi install script il\u0259 paket tez qurulur, <code>tailscale up<\/code> il\u0259 cihaz tailnet-\u0259 \u0259lav\u0259 olunur v\u0259 sonra server\u0259 public port a\u00e7madan t\u0259hl\u00fck\u0259siz giri\u015f almaq m\u00fcmk\u00fcn olur. \u018fg\u0259r daha m\u0259rk\u0259zl\u0259\u015fdirilmi\u015f idar\u0259etm\u0259 ist\u0259yirsinizs\u0259, n\u00f6vb\u0259ti add\u0131m kimi Tailscale SSH, exit node v\u0259 subnet router funksiyalar\u0131na da baxa bil\u0259rsiniz.<\/p>\n<p><strong>M\u0259nb\u0259l\u0259r:<\/strong><br \/>\nR\u0259smi Tailscale Linux install docs<br \/>\nR\u0259smi Tailscale install \/ quickstart docs<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u018fg\u0259r Ubuntu 24.04 serveriniz\u0259 uzaqdan t\u0259hl\u00fck\u0259siz giri\u015f a\u00e7maq, evd\u0259ki komp\u00fcter\u0259 sabit \u015f\u0259kild\u0259 qo\u015fulmaq v\u0259 ya public IP \/ port forward d\u0259rdi olmadan \u015f\u0259xsi \u015f\u0259b\u0259k\u0259 qurmaq ist\u0259yirsinizs\u0259, Tailscale \u00e7ox praktik h\u0259ll\u0259rd\u0259n biridir. O, WireGuard \u0259sasl\u0131 i\u015fl\u0259yir, amma \u0259l il\u0259 a\u00e7ar, peer v\u0259 konfiqurasiya idar\u0259 etm\u0259k \u0259v\u0259zin\u0259 i\u015fi xeyli sad\u0259l\u0259\u015fdirir. Bu yaz\u0131da Ubuntu 24.04-d\u0259 Tailscale qura\u015fd\u0131r\u0131lmas\u0131n\u0131, ilk [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":11046,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[17,41],"tags":[],"class_list":["post-11045","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hosting","category-tutoriallar"],"aioseo_notices":[],"jetpack_featured_media_url":"https:\/\/bitep.net\/blog\/wp-content\/uploads\/2026\/04\/tailscale-replicate.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/posts\/11045","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/comments?post=11045"}],"version-history":[{"count":1,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/posts\/11045\/revisions"}],"predecessor-version":[{"id":11047,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/posts\/11045\/revisions\/11047"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/media\/11046"}],"wp:attachment":[{"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/media?parent=11045"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/categories?post=11045"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/tags?post=11045"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}