?️ Satellite Tailscale — Episode 7: Full Remote Desktop Across Hemispheres (Tailscale + RustDesk) "Remember me? I'm back." — Douglas Quaid (Arnold Schwarzenegger), Total Recall. Also: your Mac Mini M4 Pro desktop, appearing on your iPad Mini screen from 1,200 kilometres away. ?️ When SSH Is Not Enough SSH is magnificent. In Episode 6, we used it to command our Mac Mini from a coffeeshop with nothing but a terminal and a Tailscale identity. For many tasks — pulling git repos, running scripts, inspecting logs — it is perfectly sufficient. But sometimes you need the full desktop experience. You need to: Use a GUI application that has no CLI equivalent Navigate a file system in Finder rather than in ls See what is actually on the screen (perhaps a running presentation, a rendering job, a slow build) Explain something to someone by sharing your screen remotely Simply be at your Mac Mini, cursor and all, from the other side of the country For all of this, you need a remote desktop client. And the best one, in our considered opinion, is RustDesk — combined with Tailscale to skip all the fiddly server infrastructure. ? SIPOC — Tailscale + RustDesk Setup Suppliers Inputs Process Outputs Customers RustDesk (open source) Your tailnet (Episodes 2–6) Install RustDesk on all devices → Enable direct IP access → Connect by Tailscale IP Full remote desktop session, peer-to-peer encrypted You, moving the Mac Mini cursor from your iPad Mini Tailscale Inc. Mac Mini M4 Pro (host) + iPad Mini (client) Skip RustDesk server setup entirely — Tailscale provides all coordination Direct, encrypted desktop streaming Your inner designer/developer who needs GUI apps remotely GitHub (RustDesk releases) RustDesk installed on both devices Set permanent password → Configure display settings Persistent, password-protected remote access Anyone you invite (deliberately) to your tailnet Apple App Store (iOS client) Tailscale running on all devices Test connection via Tailscale IP / MagicDNS name Latency-optimised remote desktop using modern codecs Future episodes, future use cases ? What Is RustDesk? RustDesk is a free, open-source remote desktop application written in Rust (hence the name — Rust, as in the programming language; Desk, as in desktop; RustDesk, as in a desk made of Rust, which is actually quite sturdy). It supports: Windows (host and client) macOS (host and client) Linux (host and client) iOS (client) Android (client) Browser (experimental web client) It supports file transfers, clipboard sharing, audio, multiple monitors, and more. It uses modern streaming codecs to feel responsive even on slower connections. Normally, RustDesk suggests running your own relay server (actually two: an hbbs ID server and an hbbr relay server) for peer-to-peer connections outside your local network. This is not hard — Docker makes it manageable — but it requires: A server with a public IP Six open TCP/UDP ports A public key copied to every client Ongoing maintenance With Tailscale, you need none of this. Tailscale already provides everything a RustDesk server does: device identity, IP address coordination, hole-punching, and encrypted relay as a fallback. By telling RustDesk to connect directly by IP, you bypass the relay infrastructure entirely and use Tailscale's as the transport layer. One setting. That is the entire integration. ?️ Step 1 — Install RustDesk on the Mac Mini M4 Pro (Host) Download the latest macOS release from: https://github.com/rustdesk/rustdesk/releases/latest Look for the .dmg file for Apple Silicon (aarch64 or arm64). The Mac Mini M4 Pro runs Apple Silicon — make sure you grab the right architecture. Install it: Open the .dmg Drag RustDesk to Applications Launch RustDesk Grant the permissions it requests: Screen Recording — required for the host to share its screen Accessibility — required for mouse and keyboard control Microphone (optional — for audio) These permissions can be granted in System Settings → Privacy & Security. ⚠️ On macOS, RustDesk will ask you to add it to Screen Recording permissions. If you skip this, the remote session will show a black screen. This is macOS doing its job. Give RustDesk what it needs. ⚙️ Step 2 — Configure RustDesk for Direct IP Access (The One Setting) This is the magic step. Open RustDesk on your Mac Mini. Click the three-dot menu (⋯) next to the ID number on the left side of the RustDesk window. Select Settings. Click on the Security section header to unlock it. Under Security (the sub-section), find "Enable direct IP access". Check the box. That is the entire Tailscale integration. One checkbox. By enabling direct IP access, RustDesk can accept incoming connections by IP address directly — without needing to go through a relay server. Tailscale provides the IP (100.x.x.x), the encryption (WireGuard®), and the authentication. RustDesk p