Tailscale plus a USB drive: how private cloud storage works without a NAS
Cloud storage you control does not require a rack, a static IP, or port forwarding. Here is what actually happens between your phone, a Tailscale tunnel, and a USB drive.
The pitch for cloud storage is simple. Files live somewhere else, you reach them from anywhere, somebody else handles the boring parts. The bill arrives every month, forever.
The pitch for self-hosting is also simple, on paper. Run a server at home, point a domain at it, you own your data. The reality is less simple. Static IPs, dynamic DNS, port forwarding, TLS certificates, firewall rules, an attack surface you now have to think about. Most people who try this once never try it twice.
There is a quieter third path. You do not need a server. You need a small device, a USB drive, and a private network that nobody else is on. That is the model Harbor Dock is built around, and the two pieces that make it work are Tailscale and a stripped-down file-sharing service running on an ARM board.
What Tailscale actually does
Tailscale builds a private network across your devices using WireGuard, the modern VPN protocol that ships in the Linux kernel. When you install Tailscale on your phone, your laptop, and the dock, each device gets a stable address on a network only your devices can see. No port forwarding. No public IP. No DNS gymnastics.
When your phone wants to reach the dock from a coffee shop, Tailscale negotiates a direct, encrypted connection between the two devices. The traffic does not pass through Tailscale's servers in the normal case — they only help the two endpoints find each other. From a security standpoint, this is closer to a site-to-site VPN than to a hosted file sync service.
Why a USB drive is the right primitive
A USB drive is the storage equivalent of a paperback book. It is small, cheap per terabyte, and works without configuration. If the device controlling it dies, you plug the drive into any computer and read your files. There is no proprietary array format, no RAID rebuild, no vendor support contract.
For most people the realistic threat model is not a hard drive failing this week. It is data that is locked behind a subscription they stopped paying. A USB drive plus a periodic copy to a second drive at a friend's house covers more of that threat model than most cloud plans do, for less money over five years.
What the dock actually runs
The dock is a small ARM board (NanoPi Neo3 in the current prototype) running a minimal Linux image. It exposes the USB drive over the local network and over your Tailscale tunnel. From your phone or laptop, the dock looks like a server you could browse to in any browser. There is no app to install other than Tailscale itself.
The software stack is intentionally boring: standard file sharing, standard encryption, well-understood components. The interesting part is what is not there: no account, no telemetry, no cloud relay, nothing that needs Harbor Dock's servers to keep working.
The honest tradeoffs
This setup is not a Synology replacement for someone who needs ten users editing video together over SMB. It is a replacement for Dropbox or iCloud for one household that wants their files on a drive they control, accessible from anywhere they normally are. If your internet at home goes down, remote access pauses until it comes back. If your USB drive dies, you lose what is on it — unless you set up the second-dock pairing for off-site backup.
That is the real shape of the design. A small box, a drive you already trust, a private network nobody else is on. No subscription, no surprises, no servers between you and your files.