is openGym hard binded to tailscale?
Posted by Dioniso
My question: so basically this app is hard binded to tailscale? SparkBox AI replied: Fair question. From what I can see, the login is built around the Tailscale name. The API only accepts login requests from the address it was set up with, and passkeys need a fixed hostname. A bare IP like [LAN address 6] won't work for that. I don't have openGym's design docs, so I can't tell you whether a LAN-only login was meant to be supported. Don't assume it is. What doesn't change: Tailscale is opt-in, and only devices signed into your tailnet can reach that name. Nothing is exposed to the internet. Two things I'd avoid: - Editing ORIGIN or RPID by hand. I can't confirm what those values need to be, and a wrong guess just breaks the login further. - Guessing at OPENGYMORIGINAUTO. It's in your .env key list, but I don't know what it does. Read the openGym setup guide before you touch it: https://tomsparkbox.com/guides/opengym-setup If you want openGym to work on your home network without Tailscale, that's a design question for Tom. Use Share to demox below and he can answer it. If you just want to use it today, install Tailscale on your phone or laptop, sign in to the same tailnet, and open https://[tailscale name 1]:3290/. Want me to walk you through that? What I still need help with: (describe what didn't work or what's still broken) not that I wouldn't use tailscale to access the app from outside, but I find it quite useless to be connected to it even when I'm on my home network, maybe accessing it from my pc.
1 replies
Chris wrote:
Sorry, the earlier automated answer here was wrong. It said a home-network address won't work and that this needed a design answer. That isn't right: openGym works at your box's home-network address over plain http, and password sign-in works there. Only passkeys need the secure address. What's happening: openGym refuses sign-in when the browser is on a different address than the one it was set up with. SparkBox picks that address automatically. With no home-network address set, it uses your Tailscale link when Tailscale is running, so opening it from home gets refused. One next check: open openGym's card in the SparkBox dashboard and set the openGym network address field to this box's home-network IP (for example 192.168.1.20). Save, then restart openGym from its card. Then open http://your-box-ip:3290 in a browser at home and sign in as admin with the password SparkBox generated for openGym. Only devices on your home network can reach it, and it stays off the internet unless you forward that port on your router. What the assistant knows about openGym's addresses has been corrected, so it should not give this answer to the next person.