Remote access in ten minutes: Calyston + Tailscale, step by step

We've written before about why we picked a private mesh over port forwarding or a vendor relay — short version: no open ports, no company (us included) in the path of your video. This is the companion piece: the actual ten minutes at the keyboard.

Tailscale is free for personal use (up to 100 devices), and Calyston doesn't gate it — remote access works on every tier, Community included.

Step 1 — put Tailscale on the Calyston box (3 minutes)

SSH into the machine running Calyston and run the official installer:

curl -fsSL https://tailscale.com/install.sh | sh
sudo tailscale up

tailscale up prints a login link. Open it in a browser, sign in (Google, Microsoft, GitHub or plain email — Tailscale needs an identity, it never sees your video), and the box joins your private network — your "tailnet".

Note the box's tailnet name — something like calyston.tail1a2b3c.ts.net — with tailscale status or in the Tailscale admin page.

Step 2 — put Tailscale on your phone (2 minutes)

Install the Tailscale app (iOS/Android), sign in with the same account, flip the connection toggle on. That's the whole step. Laptops work the same way — Windows, macOS or Linux.

Step 3 — open Calyston (1 minute)

In your phone's browser, go to https://<your-box-name> — the tailnet name from step 1. Your dashboard loads exactly as it does at home: live view, playback, events, settings. It's the same encrypted connection you'd have on your couch, tunnelled straight to your box, wherever you are.

Add it to your home screen and it behaves like an app.

Step 4 (optional) — let the family in

Two clean ways, depending on who's asking:

• Same household, shared account: sign their phones into the same Tailscale account. Simple, and fine for a family.
• Their own account: use Tailscale's Share feature to share just the Calyston machine with another Tailscale user — they get access to that one device, not your whole network. Then give them their own Calyston login so you keep separate audit trails.

What you did NOT just do

Worth pausing on, because this is the whole point:

• You did not open a port. Scanners sweeping the internet find nothing.
• You did not upload your video anywhere. Tailscale coordinates the connection; the video flows device-to-device over WireGuard encryption. Even Tailscale can't see it — and neither can we.
• You did not subscribe to anything. No monthly "cloud access" fee — the arrangement several camera vendors charge for is just… absent.

Troubleshooting, honestly

• Page won't load away from home? Check the Tailscale app's toggle is on — iOS in particular likes to drop the VPN after an update.
• Certificate warning the first time? That's Calyston's own self-signed certificate, same as on your LAN — accept it once per device. The connection is end-to-end encrypted inside the tunnel either way.
• Live video is choppy on mobile data? That's your upstream bandwidth at home, not the tunnel — open the camera in its lower-resolution grid tile rather than fullscreen when you're on a weak connection.

Ten minutes once, and "am I home?" stops being a question your camera system ever asks.