A plan to connect 35 remote displays without public URLs

A setup needs to connect 35 remote screen players to one central server. The locations include 30 sites in the UAE and 5 in the UK.

An earlier setup used , but this larger project aims to remove public subdomains and use stricter security. The PiSignage server would run on a inside an Unraid server.

Tailscale would be installed on that server and on each player, so the players connect to a private Tailscale IP instead of a flare URL. Each physical site would also use a hidden Wi-Fi name, a dedicated VLAN, and firewall rules to limit unwanted access.

Key points

  • The setup would replace flare URLs with private Tailscale IP connections.
  • The PiSignage server would run in a on an Unraid server.
  • Each of the 35 players would run the Tailscale client.
  • Each site would separate the signage network with a dedicated VLAN and firewall rules.
  • owners can use the same idea to reduce public exposure for remote devices.
Read original