u/mdof2

Having a hell of a time getting lxc containers to use https when connecting to them through tailscale. Not 100% sure this is a tailscale configuration issue, or something in my config in proxmox or in my tailscale control panel. Fairly familiar with networking but not an expert in the proxmox/debain environment.

Steps I'm following:
Proxmox, up and running, smooth, all good.
Connect to it via my browser via https.
Installing container, Debain 13 for example. (Helper script or community-scripts dot org.)
Perform apt update/upgrade, etc. then install via curl tailscale.
tailscale up --ssh / Copy link to the browser, authenticate, etc. new lxc shows up in my tailscale control panel/machine list. Life is good.

Can ssh to it via my tailnet ip, ping, etc. All good.

If I Install an app on said container, (again, community-scripts) I'm then unable to connect to the app/container via https. Immich for example, wordpress is another I've tested, etc. (http still works, but no https)

The error specifically is:

>Secure Connection Failed
An error occurred during a connection to immich-ct.tail0c1c87.ts.net:2283. SSL received a record that exceeded the maximum permissible length.
Error code: SSL_ERROR_RX_RECORD_TOO_LONG

I've followed several of the tutorials and step by step from Alex @ Tailscale Youtube/University, but no luck. I've specifically added the couple of lines needed to the /etc/pve/lxc/<containerID>.conf

I feel like I'm missing something stupidly obvious but not sure at this point.

Any ideas on where to start diagnosing this and how to get https enabled in the containers that are running Immich and other apps?

Additional information I can share to assist in feedback/tracking down the issue?

Does WMU block VPN Access on their network? (Nord, Tailscale, Cloudflare, etc.)

Trouble getting HTTPS to work with Tailscale and LXC containers in Proxmox