---
# System prepended metadata

title: VPN instructions

---


# VPN instructions tailscale


## MacOS

### install tailscale
- install App from [App Store](https://apps.apple.com/ca/app/tailscale/id1475387142)
- install brew `/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"`
- install tailscale `brew install tailscale`

### login on your server
- `tailscale login --login-server https://{company_name}.vpn.elemento.cloud`

- `tailscale up --accept-routes`

You can find further details on https://{company_name}.vpn.elemento.cloud/apple

## Linux

### install tailscale
`curl -fsSL https://tailscale.com/install.sh | sh`

### login on your server
- `tailscale login --login-server https://{company_name}.vpn.elemento.cloud`

- `tailscale up --login-server https://{company_name}.vpn.elemento.cloud --accept-routes`

## Windows
### Install tailscale
Download [tailscale for windows](https://pkgs.tailscale.com/stable/tailscale-setup-latest.exe)

## Setup registry
```powershell
New-ItemProperty -Path 'HKLM:\Software\Tailscale IPN' -Name UnattendedMode -PropertyType String -Value always

New-ItemProperty -Path 'HKLM:\Software\Tailscale IPN' -Name LoginURL -PropertyType String -Value https://YOUR-HEADSCALE-URL
```

## iOS
Go to iOS settings, scroll down past game center and tv provider to the tailscale app and select it. The headscale URL can be entered into the *ALTERNATE COORDINATION SERVER URL* box.

Restart the app by closing it from the iOS app switcher, open the app and select the regular Sign in option (non-SSO), and it should open up to the headscale authentication page.

Enter your credentials and log in. VPN should now be working on your iOS device.

You can find further details on https://{company_name}.vpn.elemento.cloud/apple


## Android
After opening the app, the kebab menu icon (three dots) on the top bar on the right must be repeatedly opened and closed until the Change server option appears in the menu. This is where you can enter your headscale URL.

A screen recording of this process can be seen in the tailscale-android PR which implemented this functionality: https://github.com/tailscale/tailscale-android/pull/55

After saving and restarting the app, selecting the regular Sign in option (non-SSO) should open up the VPN authentication page.

# Setup

Be sure that `Accept routes` is enabled.