Tailscale subnet router

This module allows to provision EC2 instances (part of an Autoscaling group) in order to access to private AWS resources using Tailscale

✔️ Prerequisites

In order for your instances to join automatically your Tailnet at startup, you need to:

• Generate an auth key or use the Tailscale provider (here is an example)
• Add an autoApprovers ACL so that the routes will be advertised. Here is an example that allows an instance that uses an auth_key generated by the user foo@example.com to automatically advertise the CIDR 10.0.0.0/16

  "autoApprovers": {
      "routes": {
          "10.0.0.0/16": [
              "foo@example.com"
          ]
      }
  },

:rocket: Deploy

Set the appropriate variables in variables.tfvars

module "tailscale_subnet_router" {
  source  = "Smana/tailscale-subnet-router/aws"
  version = "1.0.6"
  region = "eu-west-3"
  env    = "dev"

  name     = "foobar"
  auth_key = <REDACTED> # Put your tailscale auth_key here

  vpc_id           = module.vpc.vpc_id
  subnet_ids       = module.vpc.private_subnets
  advertise_routes = [module.vpc.vpc_cidr_block]

  tags = {
    app                         = "tailscale"
    observability:node-exporter = "true"
  }
}

And run the following command

tofu plan --var-file variables.tfvars

After checking the plan, apply it:

tofu apply --var-file variables.tfvars

🔍 CI

Run the following command in order to check the code before pushing a PR.

task pre-commit

Requirements

Providers

Modules

No modules.

Resources

Inputs

{
  "name": [
    "ubuntu/images/hvm-ssd-gp3/ubuntu-noble-24.04-amd64-server-*"
  ]
}

object({
    min = number
    max = number
  })

{
  "max": 2,
  "min": 1
}

[
  "instance",
  "volume"
]

Outputs