Tailscale / Headscale Gateway

The Tailscale gateway connects to a Tailnet using the built-in tsnet. It is not a system VPN and does not change the entire phone's network routing; it is only used by resources within OmniGate.

Configuration

Field	Description
Name	Gateway display name
Control Server URL	Official Tailscale defaults to https://login.tailscale.com; for Headscale, enter your own control server
Auth Key	Optional, used for non-interactive login
Device Name	The hostname displayed for this app in the Tailnet
Tags	Currently mainly stores configuration; actual authorization depends on the control server
Use Tailnet DNS	Currently mainly stores configuration
Accept Subnet Routes	Currently mainly stores configuration
Auto-Connect on Launch	Automatically activate this gateway when the app opens, disabled by default

Login Methods

Web Login

1. Open the Tailscale gateway configuration page.
2. Tap "Web Login."
3. The app obtains a login link and opens a web page.
4. Complete the authorization on the web page.
5. Return to the app and tap "Continue" to check the login status.

Auth Key Login

1. Create an Auth Key in the Tailscale or Headscale admin console.
2. Enter the Auth Key.
3. Tap "Connect with Auth Key."

If using Headscale, make sure the control server supports the corresponding login method.

Login State Persistence

The login state is saved in the Tailscale state directory within the app sandbox. Under normal circumstances, reopening the app will reuse the previous login state.

If the system clears app data, if the app is uninstalled and reinstalled, or if the relevant directories are manually cleared, you will need to log in again.

Device Not Authorized

If the app indicates that the device is logged in but not authorized, you need to go to the Tailscale or Headscale admin console to approve the device.

Common Issues

No login link received

Check:

• Whether the control server URL is correct.
• Whether the current network can access the control server.
• Whether Headscale supports interactive login.
• Whether you should use an Auth Key instead.

Connection Timeout

Check whether the current Wi-Fi or cellular network can access the control server. Corporate networks, firewalls, or system proxies may block the connection.

Auto-Connect

The Tailscale gateway supports an "auto-connect on launch" toggle. When enabled:

• The app automatically activates this gateway on startup.
• The gateway list will display an auto label for this gateway.
• Enabling the toggle will immediately trigger a connection and save the configuration.

When disabled, the gateway list shows a lazy label, and the gateway will only connect when you open a resource under that gateway.

Enabling auto-connect saves the time spent waiting for the gateway to connect, but it increases app memory usage and battery consumption. It is recommended to enable this only for frequently used gateways.