Conclusion is a big yes.

Firebase-host static files under a primary domain .well-known/matrix/{server,client}. Config server to Tailscale Funnel on ports 8443 and 443 (one federation port).

Through a Tailscale Docker container configured as a proxy, traffic can be forward TCP/TLS via socat.

From socat, traefik handles routing to Dendrite.

Was concerned with bandwidth, stability and latency, but things are looking good so far.

#tailscale #traefik #docker #funnel #matrix #dendrite

Probably a billion possibilities of improvement in this, but it actually ended up as a working setup.

I did a write-up of running @matrix Dendrite behind Tailscale Funnel.

#sdn #tailscale #matrix #funnel

252.no/2023-04-24-sdn.html