Familiar — Integrations
Private services the familiar can reach beyond the public internet. Public traffic still goes through the pipelock allowlist; these planes don't overlap.
Private network
Join a Tailscale tailnet so the familiar can reach your private hosts directly — no proxy flags, no env vars. Tailnet destinations stay on their normal addresses (e.g. curl https://internal.ts.net/); pipelock keeps gating public traffic.
Generate at login.tailscale.com/admin/settings/keys.
Reusable + ephemeral + tagged (e.g. --tags=tag:familiar) is recommended so node identity auto-expires and ACLs gate access.
Submitting a new key replaces any stored key; tailscaled state is preserved in the ohk-tailscale volume across restarts.