Yes, the mullvad integration is essentially what I am trying to achieve because I cannot run both vpn and tailscale as they conflict. Unfortunately I need mullvad on other devices and have spare device slots I can use so it makes no sense to pay another $5 on top.

I was hoping that requests to the jellyfin port would get returned back through tailscale directly and anything else goes on to gluetun. The subnet option sounds like this would be the solution but I could be misunderstanding many things here.

Interesting, I will definitely give that a try, thank you.

Is jellyfin going through mullvad? Jellyfin and tailscale are using host. This is part of a larger docker compose where I do have things running through gluetun.

Since your Tailscale is host network mounted, you’ll be able to expose your Docker network subnets over Tailscale then access Jellyfin. This is done via the TS_SUBNETS env variable. Docker will use a 172.16.0.0/12 subnet.

Thanks that sounds like what I’m after. So this means that I could access jellyfin on the 172.x.x.x address but anything else goes to the exit node (and then the vpn)?

Essentially, I want to be able to use a vpn at the same time as tailscale when I am on my phone and away from home or connected to a hotel wifi etc. Android doesn’t allow this but I read about tailscale exit nodes so I have set this up and it works. The issue is that I would prefer to not use my server location as the exit so I want to push traffic into gluetun (which I already have set up with other stuff running in it).