Infra Remote Access Skill

Infra Remote Access

Access Claude Code from your phone via ttyd + Tailscale

When to use

"I want to use my phone"
"remote access"
"mobile access"
Setting up a new device

Components

| Tool | Purpose | |------|---------| | ttyd | Web terminal (browser access to shell) | | Tailscale | Private VPN network (secure connection) |

Installation

# Mac
brew install ttyd tailscale

On phone:

iOS: App Store → Tailscale
Android: Google Play → Tailscale

IMPORTANT: Tailscale on Mac

Tailscale via brew requires sudo for VPN tunnel. There are two options:

Option 1: Mac App Store (recommended)

Download Tailscale from Mac App Store -- it has all permissions and persists the session.

# Check status
tailscale status
tailscale ip -4

Option 2: Userspace mode (without sudo)

If using brew version and no sudo:

# Stop brew service
brew services stop tailscale

# Start in userspace mode
/usr/local/opt/tailscale/bin/tailscaled --tun=userspace-networking --state=/tmp/tailscale.state --socket=/tmp/tailscaled.sock &

# Connect (NOTE: different socket!)
tailscale --socket=/tmp/tailscaled.sock up

# Check status
tailscale --socket=/tmp/tailscaled.sock status
tailscale --socket=/tmp/tailscaled.sock ip -4

Downsides of userspace mode:

New session = requires browser authorization
Must specify --socket=/tmp/tailscaled.sock in every command
Does not work as a full VPN (Tailscale traffic only)

Setup

Step 1: Tailscale

# If Mac App Store version:
tailscale up
tailscale ip -4
# Example: 100.x.x.x

# If userspace mode:
tailscale --socket=/tmp/tailscaled.sock up
# Open the authorization URL in browser
tailscale --socket=/tmp/tailscaled.sock ip -4

On phone:

Install Tailscale from App Store / Play Store
Log in with the same account
Ensure both devices are online in tailscale status

Step 2: ttyd

# Stop if already running
pkill ttyd

# Basic launch
ttyd -W -p 7681 bash

# For Claude Code directly
ttyd -W -p 7681 claude

# With authorization (recommended for security)
ttyd -c user:password -W -p 7681 claude

Parameters:

-W -- allow write (input) -- REQUIRED
-p 7681 -- port
-c user:pass -- Basic Auth

Step 3: Access from phone

On phone, open in browser:

http://<tailscale-ip>:7681

Example:

http://100.x.x.x:7681

Quick Start (copy-paste)

# 1. Check/start Tailscale
tailscale status || tailscale up
TSIP=$(tailscale ip -4)
echo "Tailscale IP: $TSIP"

# 2. Start ttyd
pkill ttyd 2>/dev/null
ttyd -W -p 7681 bash &

# 3. Done!
echo "Open on phone: http://$TSIP:7681"

Auto-start ttyd

mkdir -p ~/Library/LaunchAgents

cat > ~/Library/LaunchAgents/com.ttyd.plist << 'EOF'
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Label</key>
    <string>com.ttyd</string>
    <key>ProgramArguments</key>
    <array>
        <string>/usr/local/bin/ttyd</string>
        <string>-W</string>
        <string>-p</string>
        <string>7681</string>
        <string>bash</string>
    </array>
    <key>RunAtLoad</key>
    <true/>
    <key>KeepAlive</key>
    <true/>
</dict>
</plist>
EOF

launchctl load ~/Library/LaunchAgents/com.ttyd.plist

Status check

# Tailscale
tailscale status
# or for userspace:
tailscale --socket=/tmp/tailscaled.sock status

# ttyd process
pgrep -l ttyd

# Port
lsof -i :7681

Troubleshooting

| Problem | Solution | |---------|----------| | tailscaled requires root | Use userspace mode or Mac App Store version | | failed to connect to local tailscaled | Restart: brew services restart tailscale or start userspace mode | | Phone cannot see Mac | Check tailscale status -- both must be online | | ttyd not connecting | Check pgrep ttyd, restart | | Port occupied | lsof -i :7681, change port to -p 7682 | | No input in terminal | Add -W parameter | | New Tailscale authorization | Open URL in browser, log in |

Security

Tailscale encrypts all traffic (WireGuard)
ttyd is accessible only via Tailscale IP (not public)
Additionally -- Basic Auth: -c user:password
Do not use on public IP!

Current configuration

Mac IP: 100.x.x.x
ttyd port: 7681
URL: http://100.x.x.x:7681

Related skills

google-auth -- if you need Google API from phone
telegram-session -- Telegram from phone

Agent Skills: Infra Remote Access

Install this agent skill to your local

Skill Files