From 815d4572f61cc4ce8d6eb38af400017eadc253d2 Mon Sep 17 00:00:00 2001
From: Peter Steinberger <steipete@gmail.com>
Date: Thu, 1 Jan 2026 23:16:28 +0100
Subject: [PATCH] feat(cli): explain Tailscale exposure options

---
 src/commands/configure.ts           | 14 +++++++++++---
 src/commands/onboard-interactive.ts | 14 +++++++++++---
 2 files changed, 22 insertions(+), 6 deletions(-)

diff --git a/src/commands/configure.ts b/src/commands/configure.ts
index 63855f539..2d59ccd75 100644
--- a/src/commands/configure.ts
+++ b/src/commands/configure.ts
@@ -106,9 +106,17 @@ async function promptGatewayConfig(
     await select({
       message: "Tailscale exposure",
       options: [
-        { value: "off", label: "Off" },
-        { value: "serve", label: "Serve" },
-        { value: "funnel", label: "Funnel" },
+        { value: "off", label: "Off", hint: "No Tailscale exposure" },
+        {
+          value: "serve",
+          label: "Serve",
+          hint: "Private HTTPS for your tailnet (devices on Tailscale)",
+        },
+        {
+          value: "funnel",
+          label: "Funnel",
+          hint: "Public HTTPS via Tailscale Funnel (internet)",
+        },
       ],
     }),
     runtime,
diff --git a/src/commands/onboard-interactive.ts b/src/commands/onboard-interactive.ts
index fcb3bab41..f77c03749 100644
--- a/src/commands/onboard-interactive.ts
+++ b/src/commands/onboard-interactive.ts
@@ -260,9 +260,17 @@ export async function runInteractiveOnboarding(
     await select({
       message: "Tailscale exposure",
       options: [
-        { value: "off", label: "Off" },
-        { value: "serve", label: "Serve" },
-        { value: "funnel", label: "Funnel" },
+        { value: "off", label: "Off", hint: "No Tailscale exposure" },
+        {
+          value: "serve",
+          label: "Serve",
+          hint: "Private HTTPS for your tailnet (devices on Tailscale)",
+        },
+        {
+          value: "funnel",
+          label: "Funnel",
+          hint: "Public HTTPS via Tailscale Funnel (internet)",
+        },
       ],
     }),
     runtime,