diff --git a/docs/user/access-your-dappnode/vpn/overview.md b/docs/user/access-your-dappnode/vpn/overview.md index 806c317c9..691c992c4 100644 --- a/docs/user/access-your-dappnode/vpn/overview.md +++ b/docs/user/access-your-dappnode/vpn/overview.md @@ -8,21 +8,26 @@ It is not possible to use both Dappnode WiFi hotspot and VPN at the same time. I ## VPN Clients -### [WireGuard](/docs/user/access-your-dappnode/vpn/wireguard) (Recommended) +### [Tailscale](/docs/user/access-your-dappnode/vpn/tailscale) (Recommended) + +- Tailscale is a user-friendly VPN service that simplifies the process of connecting to your Dappnode. +- It's an excellent choice if you're experiencing issues with port forwarding, UPnP, or CGNAT. [Learn more](https://tailscale.com/) + +### [WireGuard](/docs/user/access-your-dappnode/vpn/wireguard) + - WireGuard is a newer, streamlined VPN protocol known for its simplicity, speed, and security. - It requires less configuration and is considered more efficient in terms of CPU usage. [Learn more](https://www.wireguard.com/) ### [OpenVPN](/docs/user/access-your-dappnode/vpn/openvpn) + - OpenVPN is a well-established VPN protocol praised for its security and reliability. - It's more versatile and can bypass most network restrictions and firewalls. [Learn more](https://openvpn.net/) ## Local vs. Remote Access - **Local Access**: Connecting to your Dappnode when you're on the same local network. Generally, this means that your Dappnode machine and the device you're using to access it are connected to the same router. - - **Remote Access**: Connecting to your Dappnode from a different network or location. This is one of the major advantages of using a VPN. :::info VPN provides a balance of security, versatility, and remote access capability. You can choose the VPN technology that best suits your needs and preferences, both fulfill the requirements of most users. ::: - diff --git a/docs/user/access-your-dappnode/vpn/tailscale.md b/docs/user/access-your-dappnode/vpn/tailscale.md new file mode 100644 index 000000000..4796f7b8b --- /dev/null +++ b/docs/user/access-your-dappnode/vpn/tailscale.md @@ -0,0 +1,76 @@ +# Connect to Your Dappnode Using Tailscale + +Tailscale is a secure, peer-to-peer VPN solution that simplifies connecting to your Dappnode without requiring complex port forwarding, solving issues such as UPnP not being recognized, routers behind CGNAT, or other port forwarding challenges. This guide walks you through setting up Tailscale to access your Dappnode. + +:::tip +Using Tailscale is an excellent alternative if you're experiencing issues with UPnP, CGNAT, or port forwarding. It's easy to set up and ensures a seamless connection to your Dappnode. +::: + +--- + +## Prerequisites + +Before starting, ensure you have: + +- A [Tailscale account](https://tailscale.com/). +- Tailscale installed on your device. Download [here](https://tailscale.com/download) +- Having access to your [Dappnode's Admin UI](https://my.dappnode) + +## Step 1: Create an Auth Key + +1. Visit [Tailscale Admin Settings](https://login.tailscale.com/admin/settings/keys). +![Authkey1](/img/authkey1.png) +2. Create a new auth key. Any name will work. +![Authkey2](/img/authkey2.png) +3. Save the key for the next step. +![Authkey3](/img/authkey3.png) + +## Step 2: Install Tailscale on Your Dappnode + +1. Access your [Dappnode's Admin UI](https://my.dappnode) +2. Navigate to **Dappstore** and search for the `Tailscale` package. +3. Click **Install** +4. Go to the Tailscale package in **Packages** tab and enter the auth key you created during installation. +![Authkey4](/img/authkey4.png) + +Once installed, Tailscale will run as a service on your Dappnode. + +## Step 3: Configure Tailscale to Connect to Dappnode Internal Networks + +### a. Accept Advertised Routes from Your Dappnode + +1. Go to your [Tailscale Machines Dashboard](https://login.tailscale.com/admin/machines). +![Machinelist](/img/machinelist.png) +2. Find your Dappnode device in the list of machines +3. Open the "Edit Route Settings" modal and check the Subnet Route that appears. +![Subnetcheck](/img/subnetcheck.png) + +### b. Add a Custom Nameserver + +1. Go to your [Tailscale DNS Admin Panel](https://login.tailscale.com/admin/dns). +2. Find the Nameservers section, click Add nameserver button and add a custom nameserver. +![Customserver](/img/customserver.png) +3. Fill the popup with: + - **Nameserver IP:** `172.33.1.2` + - Activate "Restrict to domain" switch. + - Set the domain as `dappnode`. + +## Step 4: Access Your Dappnode + +### a. Connect to Tailscale + +Ensure that your laptop, computer, or phone is connected to Tailscale. + +### b. Access Dappnode Services + +Visit [http://my.dappnode](http://my.dappnode) in your browser. + +:::warning +Have 2 or more Dappnodes? It won't work out of the box. You won't be able to choose which one it connects to. + +You need to go to the machines you don't want to access and disable subnet routes. Your Tailscale will then direct you to the Dappnode that has subnets activated. +::: + +--- + +If you encounter any issues or need further assistance, refer to the [Dappnode Community Forums](https://forum.dappnode.io/) or the [Tailscale Support](https://tailscale.com/support/). diff --git a/sidebars.js b/sidebars.js index 5214df43f..e48145a45 100644 --- a/sidebars.js +++ b/sidebars.js @@ -73,6 +73,11 @@ const sidebars = { label: "Overview", id: "user/access-your-dappnode/vpn/overview", }, + { + type: "doc", + label: "Tailscale", + id: "user/access-your-dappnode/vpn/tailscale", + }, { type: "doc", label: "Wireguard", diff --git a/static/img/authkey1.png b/static/img/authkey1.png new file mode 100644 index 000000000..a4568da22 Binary files /dev/null and b/static/img/authkey1.png differ diff --git a/static/img/authkey2.png b/static/img/authkey2.png new file mode 100644 index 000000000..cb839615a Binary files /dev/null and b/static/img/authkey2.png differ diff --git a/static/img/authkey3.png b/static/img/authkey3.png new file mode 100644 index 000000000..4c5c88845 Binary files /dev/null and b/static/img/authkey3.png differ diff --git a/static/img/authkey4.png b/static/img/authkey4.png new file mode 100644 index 000000000..03f78892c Binary files /dev/null and b/static/img/authkey4.png differ diff --git a/static/img/customserver.png b/static/img/customserver.png new file mode 100644 index 000000000..0b23bdf11 Binary files /dev/null and b/static/img/customserver.png differ diff --git a/static/img/machinelist.png b/static/img/machinelist.png new file mode 100644 index 000000000..dba05da65 Binary files /dev/null and b/static/img/machinelist.png differ diff --git a/static/img/subnetcheck.png b/static/img/subnetcheck.png new file mode 100644 index 000000000..d66505a21 Binary files /dev/null and b/static/img/subnetcheck.png differ