Tailscale works. Immich works. But they don’t work together :(

TL;DR: I can't access Immich via http://my_tailscale_ip:2283.

Hey everyone, I tried fixing this stuff myself for a while and finally decided to ask reddit.

The situation:

I can access Immich from my local WiFi network. I simply enter http://my_local_ip:2283 in the Immich app and everything works as expected.

I can ping my laptop from my phone using the Tailscale app, not only when I'm on my local WiFi but also when I'm on cellular data and disconnected from my local network. It says "Pinging [laptop name] 100ms Relayed ([Server_near_me])" But I can't access Immich.

I've tried

• http://my_tailscale_ip:2283
• http://[name].tail[number].ts.net:2283
• http://[name]:2283

None of these work. They don't work when my phone is on cellular data. They don't work when my phone is on my local network either, even though my (admittedly limited) understanding tells me http://[name].tail[number].ts.net:2283 should work on my local network too.

The tailscale addresses work on the browser on the same laptop where the Immich server is.

What I've done so far:

1. I've made a rule in Windows Defender Firewall with Advanced Security. Allow connection, Protocol type TCP, Local port 2283, Profiles: Domain, Private and Public are all checked.
2. I have two SIMs with different phone numbers. I connected my laptop to a hotspot from one phone and tried again. It didn't work. I did this because my student housing has a weird internet system where we have to configure our routers with IP addresses and DNS and so on, given by the uni admins. I thought maybe that was interfering with something.

Info:

• Immich v3.2.1 running in Docker Desktop
• Tailscale version 1.102.4
• No exit node configured.