# Tailscale on a VPS 2026 – Reach Your Server over VPN

Tailscale on an Ubuntu VPS: SSH without public 22, subnet router, exit node, vs WireGuard vs Cloudflare Tunnel, lock down admin UIs.

**Quick answer:** **Tailscale** on the VPS = SSH, Portainer, NPM admin and Home Assistant via a **100.x VPN IP** without publishing those ports.

- `tailscale up` on Ubuntu
- SSH to 100.x
- Close public 22 / bind admin UIs to the tailnet

[WireGuard](/en/root-v-server/wireguard-vpn-einrichten) · [Cloudflare Tunnel](/en/domain/cloudflare-tunnel-einrichten)

*VPS & root servers: [Order VPS in Germany](https://nexorahost.com/Dedicated-server) · [panel.nexorahost.de](https://panel.nexorahost.de) · [nexorahost.com](https://nexorahost.com) (Maincubes FRA01 Frankfurt · Ryzen · NVMe · GDPR)*