TautWeekly for Plex v0.25.1
Released: 2026-09-01
Funnel status on the Dashboard
Every maintained Manager now shows Tailscale Funnel as the fourth row in the
Dashboard Integrations card, directly below SMTP. This is a visibility and
state-truthfulness refinement of the v0.25.0 public-access feature:
| Funnel condition | Dashboard presentation |
|---|---|
| Safely disabled with no retained cleanup requirement | Passed · Off |
| Exact fixed route, public DNS, and trusted TLS verified | Passed · Active |
| Exact route configured locally while publication remains unproven | Gold Attention · Publication pending |
| Password lock missing while enabled, route mismatch, stale/malformed state, or failed cleanup | Failed · Blocked |
| Unsupported or genuinely not configured on a non-applicable surface | Neutral informational state |
The overall Integrations card remains Passed when Tautulli/Plex and SMTP checks
pass and optional Funnel is safely Off. Neutral non-applicable Funnel state does
not fail the card. The row is an accessible control that opens
Settings > Tailscale Funnel, updates browser history, moves focus to the
Settings heading, and retains the established mobile, reduced-motion, and
forced-color behavior.
Retained state and privacy
Ordinary Dashboard rendering does not run Tailscale, verify publication,
request elevation, or change a route. It reuses the existing authenticated,
sanitized typed Manager status that the Settings panel already consumes. Only
fixed state labels and supporting text reach the Dashboard row; it does not
display a hostname, public URL, command, argument, executable, port, target,
provider output, tailnet identity, device data, private address, token, or
sensitive path.
Host/origin admission, CSRF, authentication, sessions, Secure/HttpOnly/SameSite
cookies, loopback binding, password gating, no-index metadata, and fail-closed
lifecycle cleanup are unchanged. Validation used only retained synthetic state
and local fixtures; no real Funnel, Tailscale login, DNS, firewall, router, or
workstation state was changed.
Package scope
The canonical embedded Manager assets and synchronized fictional GUI preview
were updated once. The shared release builder places that Manager into the
Windows installer and portable package, native Linux package, unified
Docker/NAS/QNAP/Synology/Unraid image and fallback archive, macOS Docker
package, and FreeBSD/Podman package. No platform-specific browser copy or
provider adapter was introduced.
The v0.25.0 Quickstart spotlight remains current because this patch refines the
presentation of its existing Funnel capability rather than adding a separate
substantial end-user feature.