Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 8 additions & 3 deletions docs/user/access-your-dappnode/vpn/overview.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,21 +8,26 @@ It is not possible to use both Dappnode WiFi hotspot and VPN at the same time. I

## VPN Clients

### [WireGuard](/docs/user/access-your-dappnode/vpn/wireguard) (Recommended)
### [Tailscale](/docs/user/access-your-dappnode/vpn/tailscale) (Recommended)

- Tailscale is a user-friendly VPN service that simplifies the process of connecting to your Dappnode.
- It's an excellent choice if you're experiencing issues with port forwarding, UPnP, or CGNAT. [Learn more](https://tailscale.com/)

### [WireGuard](/docs/user/access-your-dappnode/vpn/wireguard)

- WireGuard is a newer, streamlined VPN protocol known for its simplicity, speed, and security.
- It requires less configuration and is considered more efficient in terms of CPU usage. [Learn more](https://www.wireguard.com/)

### [OpenVPN](/docs/user/access-your-dappnode/vpn/openvpn)

- OpenVPN is a well-established VPN protocol praised for its security and reliability.
- It's more versatile and can bypass most network restrictions and firewalls. [Learn more](https://openvpn.net/)

## Local vs. Remote Access

- **Local Access**: Connecting to your Dappnode when you're on the same local network. Generally, this means that your Dappnode machine and the device you're using to access it are connected to the same router.

- **Remote Access**: Connecting to your Dappnode from a different network or location. This is one of the major advantages of using a VPN.

:::info
VPN provides a balance of security, versatility, and remote access capability. You can choose the VPN technology that best suits your needs and preferences, both fulfill the requirements of most users.
:::

76 changes: 76 additions & 0 deletions docs/user/access-your-dappnode/vpn/tailscale.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,76 @@
# Connect to Your Dappnode Using Tailscale

Tailscale is a secure, peer-to-peer VPN solution that simplifies connecting to your Dappnode without requiring complex port forwarding, solving issues such as UPnP not being recognized, routers behind CGNAT, or other port forwarding challenges. This guide walks you through setting up Tailscale to access your Dappnode.

:::tip
Using Tailscale is an excellent alternative if you're experiencing issues with UPnP, CGNAT, or port forwarding. It's easy to set up and ensures a seamless connection to your Dappnode.
:::

---

## Prerequisites

Before starting, ensure you have:

- A [Tailscale account](https://tailscale.com/).
- Tailscale installed on your device. Download [here](https://tailscale.com/download)
- Having access to your [Dappnode's Admin UI](https://my.dappnode)

## Step 1: Create an Auth Key

1. Visit [Tailscale Admin Settings](https://login.tailscale.com/admin/settings/keys).
![Authkey1](/img/authkey1.png)
2. Create a new auth key. Any name will work.
![Authkey2](/img/authkey2.png)
3. Save the key for the next step.
![Authkey3](/img/authkey3.png)

## Step 2: Install Tailscale on Your Dappnode

1. Access your [Dappnode's Admin UI](https://my.dappnode)
2. Navigate to **Dappstore** and search for the `Tailscale` package.
3. Click **Install**
4. Go to the Tailscale package in **Packages** tab and enter the auth key you created during installation.
![Authkey4](/img/authkey4.png)

Once installed, Tailscale will run as a service on your Dappnode.

## Step 3: Configure Tailscale to Connect to Dappnode Internal Networks

### a. Accept Advertised Routes from Your Dappnode

1. Go to your [Tailscale Machines Dashboard](https://login.tailscale.com/admin/machines).
![Machinelist](/img/machinelist.png)
2. Find your Dappnode device in the list of machines
3. Open the "Edit Route Settings" modal and check the Subnet Route that appears.
![Subnetcheck](/img/subnetcheck.png)

### b. Add a Custom Nameserver

1. Go to your [Tailscale DNS Admin Panel](https://login.tailscale.com/admin/dns).
2. Find the Nameservers section, click Add nameserver button and add a custom nameserver.
![Customserver](/img/customserver.png)
3. Fill the popup with:
- **Nameserver IP:** `172.33.1.2`
- Activate "Restrict to domain" switch.
- Set the domain as `dappnode`.

## Step 4: Access Your Dappnode

### a. Connect to Tailscale

Ensure that your laptop, computer, or phone is connected to Tailscale.

### b. Access Dappnode Services

Visit [http://my.dappnode](http://my.dappnode) in your browser.

:::warning
Have 2 or more Dappnodes? It won't work out of the box. You won't be able to choose which one it connects to.

You need to go to the machines you don't want to access and disable subnet routes. Your Tailscale will then direct you to the Dappnode that has subnets activated.
:::

---

If you encounter any issues or need further assistance, refer to the [Dappnode Community Forums](https://forum.dappnode.io/) or the [Tailscale Support](https://tailscale.com/support/).
5 changes: 5 additions & 0 deletions sidebars.js
Original file line number Diff line number Diff line change
Expand Up @@ -73,6 +73,11 @@ const sidebars = {
label: "Overview",
id: "user/access-your-dappnode/vpn/overview",
},
{
type: "doc",
label: "Tailscale",
id: "user/access-your-dappnode/vpn/tailscale",
},
{
type: "doc",
label: "Wireguard",
Expand Down
Binary file added static/img/authkey1.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added static/img/authkey2.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added static/img/authkey3.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added static/img/authkey4.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added static/img/customserver.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added static/img/machinelist.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added static/img/subnetcheck.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading