shoutfire Guide

Edmond / OKC · always-on gear

Tailscale not reconnecting after reboot

Power blip, Windows Update, someone flipped a switch — the box comes back, but Tailscale doesn't. From the couch it looks dead. On site, it's just waiting for a login you aren't there to give.

Tailscale after reboot: Startup folder fails vs unattended service that survives reboot

I've made that drive twice for the same shop PC. Both times, the fix was making Tailscale start without me.

What's actually wrong

Tailscale is installed, and it worked yesterday. After a reboot, it sits quiet until someone signs into the desktop or re-runs the client. Remote access is gone even though the machine itself is fine.

That's not "the VPN is broken." That's unattended start never getting set up.

Checklist: before the next reboot

  1. Confirm the box is yours to admin. Shop PC, Pi, NVR/PC — anything you can install software on. Cloud cameras like Ring or Nest are not the right target.
  2. Windows: set up unattended Tailscale. Install the official client and sign in once on that machine. Turn on the setting that starts Tailscale before or without an interactive user session (the wording varies by client version — look for "unattended," "start with Windows," or "run as service"). Reboot once on purpose, then confirm from another device that the node is back, without touching the keyboard.
  3. Linux: enable the service. After installing and running tailscale up, enable the daemon so it survives a reboot (systemctl enable --now tailscaled, or your distro's equivalent). Reboot once and confirm the node rejoins.
  4. Prove it cold. Reboot again, or pull power for 10 seconds. Wait, then check the Tailscale admin from your phone. If it's offline until you log in locally, unattended still isn't done.
  5. Write the break-glass note. Where the machine is, who can touch it, what "signed in once" looked like. Future-you, at 11 p.m., will thank you.

What this does not fix

What you'll write down

Your Tailscale account, your machine's hostname, your login path. No shared secrets from me — the pack has blanks you fill in yourself.

Access Pack ($99)

A printable checklist ZIP for always-on Tailscale and a dead-man email shout, on a box you admin. Your accounts.

Access Pack ($99)

ZIP. Your accounts. Not a managed service. Not 24/7. Tailscale stays yours.

Stephen · shoutfire.com

Related: When the box goes dark · Remote access without port forwarding · Away from home / break-glass