heywoodlh/tailscale-mullvad-router repository overview

This is a Tailscale container meant to connect to Mullvad via Wireguard and expose the Mullvad SOCKS proxy available over 10.64.0.1.

⁠Usage

docker volume create tailscale
docker run -it --rm \
    --privileged \
    -v tailscale:/var/lib/tailscale \
    -e WIREGUARD_ENDPOINT="${WIREGUARD_ENDPOINT}" \
    -e WIREGUARD_ENDPOINT_PUBKEY="${WIREGUARD_ENDPOINT_PUBKEY}" \
    -e WIREGUARD_PRIVKEY="${WIREGUARD_ENDPOINT_PUBKEY}" \
    -e WIREGUARD_ADDRESS="${WIREGUARD_ADDRESS}" \
    -e TS_AUTHKEY="${TS_AUTH_KEY}" \
    heywoodlh/tailscale-mullvad-router

Requires the following environment variables:

• WIREGUARD_ENDPOINT: Mullvad's Wireguard endpoint IP
• WIREGUARD_ENDPOINT_PUBKEY: Mullvad's Wireguard endpoint public key
• WIREGUARD_PRIVKEY: Private key for the Wireguard client
• WIREGUARD_ADDRESS: Wireguard client address
• TS_AUTHKEY: Tailscale auth key

Since this container is based on the official Tailscale image⁠, you can also provide any additional environment variable that work with the Tailscale image.

Test with: curl --proxy socks://10.64.0.1:1080 ifconfig.io

⁠Browser Configuration

Once the container is running and successfully connects to Mullvad and your Tailnet, you can configure your browser to use the SOCKSv5 proxy at 10.64.0.1.