Connecting a private database
This tutorial explains how to back up a a private server/database using SimpleBackups + Tailscale, allowing for secure backup without exposing the database to the internet.
Connecting a Private Database using Tailscale
Tailscale is a virtual private network (VPN) service that allows you to access resources on your private network securely. In this tutorial, we will guide you through the process of connecting a private database using Tailscale.
Prerequisites
Before you begin, ensure that you have the following:
- A Tailscale account and client installed on your device
- Access to the private database you want to connect to
- Administrative access to the device where Tailscale is installed
Steps to connect to a private database using Tailscale
1. Ensure that Tailscale is installed and running
You can follow do so by installing Tailscale easily https://tailscale.com/download/linux
2. Grant server access to SimpleBackups
- Click on Machines to see all your connected Tailscale servers
- Click on the server where you want SimpleBackups to access
- Click on Share as shown below
3. Create an invite link that can be shared
To allow SimpleBackups to connect to your private server/database, please follow these steps:
- Click on "Generate & copy invite link" as shown below
- Copy the invite link
- Open a support ticket with us and share the link with us
4. Create your backup
Once your share access is accepted, you can proceed to create your backup using the private IP address assigned to your server/machine by Tailscale. You can select the Serverless backup option and choose Yes - Database publicly accessible.
Security
Security Note 1
When you share a node/resource with us. Only a subset of our own workers are able to see your node's advertised ports (controlled by your own ACL).
The nodes/resources you share with SimpleBackups, do not have access to our workers, other shared nodes with us do not have access to your own node, so access is like a one way street, from our workers to the shared node. You can check Tailscale documentation for more details.
Security Note 2
SimpleBackups does not use Tailscale SSH, it should be disabled in order for SimpleBackups to work as expected and authenticate the unique key you add when connecting the server.
SimpleBackups never asks for unauthenticated SSH access on Tailscale. Your nodes must always ask for SSH password or public/private key authentication.
Conclusion
In this tutorial, we have shown you how to connect to a private server/database using Tailscale. By following these steps, you can securely back up your database on a private network, without exposing it to the internet.
Last updated on July 24, 2023