headscale: macOS configuration

Recent Tailscale versions (1.34.0 and higher)

Tailscale added Fast User Switching in version 1.34 and you can now use the new login command to connect to one or more headscale (and Tailscale) servers. The previously used profiles does not have an effect anymore.

Command line

Use Tailscale's login command to add your profile:

tailscale login --login-server https://vpn.wise-angel.com

GUI

1. ALT + Click the Tailscale icon in the menu and hover over the Debug menu
2. Under "Custom Login Server", select "Add Account..."
3. Enter "https://vpn.wise-angel.com" of the headscale instance and press "Add Account"
4. Follow the login procedure in the browser

Apple configuration profiles (1.32.0 and lower)

This page provides configuration profiles for the official Tailscale clients for

• macOS - AppStore Client.
• macOS - Standalone Client.

The profiles will configure Tailscale.app to use https://vpn.wise-angel.com as its control server.

Caution

You should always download and inspect the profile before installing it:

• for app store client: curl https://vpn.wise-angel.com/apple/macos-app-store
• for standalone client: curl https://vpn.wise-angel.com/apple/macos-standalone

Profiles

macOS

Headscale can be set to the default server by installing a Headscale configuration profile:

macOS AppStore profile macOS Standalone profile

1. Download the profile, then open it. When it has been opened, there should be a notification that a profile can be installed
2. Open System Preferences and go to "Profiles"
3. Find and install the Headscale profile
4. Restart Tailscale.app and log in

Or

Use your terminal to configure the default setting for Tailscale by issuing:

• for app store client: defaults write io.tailscale.ipn.macos ControlURL https://vpn.wise-angel.com
• for standalone client: defaults write io.tailscale.ipn.macsys ControlURL https://vpn.wise-angel.com

Restart Tailscale.app and log in.

headscale: iOS configuration

Recent Tailscale versions (1.38.1 and higher)

Tailscale 1.38.1 on iOS added a configuration option to allow user to set an "Alternate Coordination server". This can be used to connect to your headscale server.

GUI

1. Install the official Tailscale iOS client from the App store
2. Open Tailscale and make sure you are not logged in to any account
3. Open Settings on the iOS device
4. Scroll down to the "third party apps" section, under "Game Center" or "TV Provider"
5. Find Tailscale and select it
   • If the iOS device was previously logged into Tailscale, switch the "Reset Keychain" toggle to "on"
6. Enter "https://vpn.wise-angel.com" under "Alternate Coordination Server URL"
7. Restart the app by closing it from the iOS app switcher, open the app and select the regular sign in option (non-SSO). It should open up to the headscale authentication page.
8. Enter your credentials and log in. Headscale should now be working on your iOS device