VPN Settings
Configure a VPN for secure remote access to this device.

Connection Status
When a VPN provider is configured and enabled, the status section displays:
| Status | Indicator | Details |
|---|---|---|
| Connected | Green dot + green badge | VPN active with assigned IP and hostname displayed |
| Connecting | Amber dot + amber badge | Service running, establishing connection (shows backend state) |
| Stopped | Gray dot + gray badge | VPN disabled |
When connected, the VPN IP (monospace) and Hostname are displayed.
Service Configuration
| Field | Description |
|---|---|
| Enable VPN | Connect this device to a VPN network for secure remote access. |
| Provider | None or Tailscale. Determines which provider-specific settings are shown. |
Tailscale Configuration
Shown when Tailscale is selected as the provider.
| Field | Description |
|---|---|
| Auth Key | Tailscale authentication key (format: tskey-auth-...). The key is not stored on the device — it is used once to authenticate. An "Authenticated" or "Not authenticated" badge shows the current state. Entering a new key will log out and re-authenticate. Use the eye icon to toggle visibility. |
| Device Name | Custom name for this device on the Tailscale network. Leave empty for system default. |
| Advertise Routes | Comma-separated subnet routes in CIDR notation (e.g., 192.168.1.0/24). Requires approval in Tailscale admin. |
| Advertise as Exit Node | Allow other devices on your Tailscale network to route internet traffic through this device. |
Saving
Configuration is applied immediately on save and persists across device reboots.
Success messages:
- When VPN enabled: "VPN settings saved. The device is connecting to the VPN network."
- When VPN disabled: "VPN settings saved. VPN has been disconnected."
Action Buttons
- Reload — Discards unsaved changes and refreshes from device
- Save — Applies the current VPN configuration immediately
Related Documentation
- Settings Overview — All settings categories
- WiFi — Wireless network configuration