VPN

VPN instructions tailscale

MacOS

install tailscale

• install App from App Store
• install brew /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
• install tailscale brew install tailscale

login on your server

• tailscale login --login-server https://{company_name}.vpn.elemento.cloud

• tailscale up --accept-routes

You can find further details on https://{company_name}.vpn.elemento.cloud/apple

Linux

install tailscale

curl -fsSL https://tailscale.com/install.sh | sh

login on your server

• tailscale login --login-server https://{company_name}.vpn.elemento.cloud

• tailscale up --login-server https://{company_name}.vpn.elemento.cloud --accept-routes

Windows

Install tailscale

Download tailscale for windows

Setup registry

New-ItemProperty -Path 'HKLM:\Software\Tailscale IPN' -Name UnattendedMode -PropertyType String -Value always

New-ItemProperty -Path 'HKLM:\Software\Tailscale IPN' -Name LoginURL -PropertyType String -Value https://YOUR-HEADSCALE-URL

iOS

Go to iOS settings, scroll down past game center and tv provider to the tailscale app and select it. The headscale URL can be entered into the ALTERNATE COORDINATION SERVER URL box.

Restart the app by closing it from the iOS app switcher, open the app and select the regular Sign in option (non-SSO), and it should open up to the headscale authentication page.

Enter your credentials and log in. VPN should now be working on your iOS device.

You can find further details on https://{company_name}.vpn.elemento.cloud/apple

Android

After opening the app, the kebab menu icon (three dots) on the top bar on the right must be repeatedly opened and closed until the Change server option appears in the menu. This is where you can enter your headscale URL.

A screen recording of this process can be seen in the tailscale-android PR which implemented this functionality: https://github.com/tailscale/tailscale-android/pull/55

After saving and restarting the app, selecting the regular Sign in option (non-SSO) should open up the VPN authentication page.

Setup

Be sure that Accept routes is enabled.