the window, elsewhere

Reach kolu from another device.

This page is the HTTPS half of From a Mac: reach the running kolu app from a phone or another laptop. It is not how you put a second machine’s terminals on the canvas — that is Add another machine.

Tailscale Serve gives kolu a private HTTPS URL. That single move lets your phone or laptop reach the workspace and also unlocks the secure-context features used by install prompts and app badges, notifications, and service workers.

Install Tailscale on both devices.

Put Tailscale on the dev box and the phone or laptop, signed into the same account. They join one private tailnet.
Enable MagicDNS and HTTPS Certificates.

In the Tailscale admin console, turn on MagicDNS, then HTTPS Certificates.
Serve kolu’s port from the dev box.
```
tailscale serve --bg 7681
```
Tailscale prints a tailnet URL:
```
https://your-box.your-tailnet.ts.net/
```
Allow that origin on the kolu host.

Tailscale presents a browser origin kolu did not start with. Add the exact URL (no trailing slash) to the service:
```
services.kolu.allowedOrigins = [
  "https://your-box.your-tailnet.ts.net"
];
```
Or, for a one-off kolu web / nix run, set KOLU_ALLOWED_ORIGINS to the same origin. Without this, the page may load and then fail to talk to the server. Details are on Deployment.
Open the printed URL on the other device and pin it there.

Use the full https://<machine>.<tailnet>.ts.net address.

One more honesty note: the ...ts.net hostname is visible in public Certificate Transparency logs because that is how public certificates are audited. Do not put secrets in machine names.

Which tunnel?

Tailscale Serve

For “just my devices.” Tailnet-only, real HTTPS, and the default path for a private kolu.

Cloudflare Tunnel + Access

For a public URL that still requires identity before anyone reaches kolu.

ngrok

For a throwaway public URL during a demo. No auth by default, so tear it down after.

This page is about reaching the browser app. For shell-level remote terminals over ssh, use kolu --host user@box (ls, create, send, snapshot, …) instead. Once you reach kolu, Add another machine covers putting another machine’s terminals on your canvas over ssh — how to add hosts, switch between them, and the ssh-session limitations (the macOS Keychain, ssh-agent, the clipboard).

Manage the serve

tailscale serve status
tailscale serve reset
tailscale serve off

From a Macthe usual setup: Linux box, Mac as the window Install as an Appbrowser install paths, secure contexts, badges, and notifications Add another machineput a second machine's terminals on your canvas over ssh Troubleshootingmissing install buttons, notification permissions, and update checks

Which tunnel?

Manage the serve

Related