# Elemento Tailscale Instructions

## MacOS

### Option 1
#### install tailscale
- install brew `/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"`
- install tailscale `brew install tailscale`
- install App from [App Store](https://apps.apple.com/ca/app/tailscale/id1475387142)

#### login on your server
- `tailscale login --login-server https://{company_name}.vpn.elemento.cloud`

- `tailscale up --accept-routes`

You can find further details on `https://{company_name}.vpn.elemento.cloud/apple`

### Option 2
#### install tailscale from App Store
- install App from [App Store](https://apps.apple.com/ca/app/tailscale/id1475387142)

#### download the VPN profile
Download and install the network profile from `https://{company_name}.vpn.elemento.cloud/apple/macos-app-store`

## Linux

### install tailscale
`curl -fsSL https://tailscale.com/install.sh | sh`

### login on your server
- `tailscale login --login-server https://{company_name}.vpn.elemento.cloud`

- `tailscale up --login-server https://{company_name}.vpn.elemento.cloud --accept-routes`

## Windows
### Install tailscale
Download [tailscale for windows](https://pkgs.tailscale.com/stable/tailscale-setup-latest.exe)

## Setup registry

New-ItemProperty -Path 'HKLM:\Software\Tailscale IPN' -Name UnattendedMode -PropertyType String -Value always

New-ItemProperty -Path 'HKLM:\Software\Tailscale IPN' -Name LoginURL -PropertyType String -Value https://YOUR-HEADSCALE-URL

## iOS
Go to iOS settings, scroll down past game center and tv provider to the tailscale app and select it. The headscale URL can be entered into the *ALTERNATE COORDINATION SERVER URL* box.

Restart the app by closing it from the iOS app switcher, open the app and select the regular Sign in option (non-SSO), and it should open up to the headscale authentication page.

Enter your credentials and log in. VPN should now be working on your iOS device.

You can find further details on https://{company_name}.vpn.elemento.cloud/apple

## Android
After opening the app, the kebab menu icon (three dots) on the top bar on the right must be repeatedly opened and closed until the Change server option appears in the menu. This is where you can enter your headscale URL.

A screen recording of this process can be seen in the tailscale-android PR which implemented this functionality: https://github.com/tailscale/tailscale-android/pull/55

After saving and restarting the app, selecting the regular Sign in option (non-SSO) should open up the VPN authentication page.