Tailscale SSH on macOS

Secure SSH from your iPhone to your Mac without exposing port 22 on Wi‑Fi or Ethernet. This setup runs a dedicated sshd bound to localhost and publishes it only inside your tailnet using Tailscale Serve.

What This Repo Includes

• tailscale-ssh.md - full guide with background, rationale, and step‑by‑step setup
• tailscale-ssh.sh - optional one‑shot installer script (macOS)

Quick Start

Minimum requirements:

• Install the Standalone Tailscale app
• Turn off macOS Remote Login
• Have an SSH key ready

If you want the complete walkthrough, start here:

• Full guide

One‑Shot Script (Optional)

Review the script before running it. It automates Steps 1‑4 from the guide.

Install:

curl -fsSL https://raw.githubusercontent.com/dawidstruzik/tailscale-ssh-macos/main/tailscale-ssh.sh | bash -s -- install

Uninstall:

curl -fsSL https://raw.githubusercontent.com/dawidstruzik/tailscale-ssh-macos/main/tailscale-ssh.sh | bash -s -- uninstall

Notes:

• macOS only
• Requires Remote Login to be Off
• Uses sudo only when needed

Repo Structure

• README.md - this overview
• tailscale-ssh.md - full guide
• tailscale-ssh.sh - installer script