Make Your Node Externally Accessible – Choose the Method That Suits You
Your Umbrel node is now running locally (http://umbrel.local), but how do you access it securely from your phone or laptop when you’re away from home? There are several ways, from super simple to advanced. We recommend starting with the easiest one.
Which Method Should You Choose?
| Method |
Difficulty |
Speed |
Privacy/Security |
When to Choose? |
Setup Time |
Platform Notes |
| Tor Onion (recommended start) |
★☆☆☆☆ |
Slow |
Maximum |
Maximum privacy, no extra account |
2 minutes |
Android good, iPhone slow (Orbot) |
| Tailscale HTTP |
★★☆☆☆ |
Fast |
High (WireGuard) |
Daily use, file sync from phone |
5-10 minutes |
Works on all devices |
| Tailscale HTTPS |
★★★★☆ |
Fast |
Very high |
Green padlock, apps requiring HTTPS |
15-30 minutes |
Requires terminal (see advanced) |
| Other (Zerotier, Headscale, etc.) |
★★★★★ |
Variable |
High |
No Tailscale account |
30+ minutes |
For hardcore decentralists |
Why start with Tor? No hassle with accounts or opening ports.
Why upgrade to Tailscale? Much faster for Nextcloud sync, photo uploads, etc.
Option 1: Tor Onion – The Easiest & Most Private Way
Why choose this?
No extra installations, no account, no ports open → maximum privacy. Works everywhere (behind CG-NAT, carrier NAT).
Drawbacks: Slow for large files (photos, videos).
Steps (2 minutes):
- Open Umbrel dashboard (http://umbrel.local).
- Go to Settings → Advanced Settings → Remote Access.
- Enable Via Tor.
- Umbrel generates an .onion link (e.g., http://long-string.onion).
- Copy the link and store it securely.
Access from your device:
- Android: Install Tor Browser (Play Store) → paste .onion link → dashboard opens.
- iPhone: Install Onion Browser or Orbot (App Store). Note: Orbot often loads slowly or is unstable on iOS. Try Onion Browser as alternative.
- Laptop/PC: Download Tor Browser (torproject.org) → paste link.
For Nextcloud: http://[your-onion]/nextcloud (use Tor Browser).
For mobile Nextcloud app: Tor not directly supported → use web version in Tor Browser.
Screenshot: [Umbrel: Remote Access → Tor toggle + .onion link]
Tip: Bookmark the .onion link in Tor Browser. Test on laptop first if it feels slow on phone.
Option 2: Tailscale HTTP – Faster for Daily Use (No Terminal Required)
Why?
Fast (WireGuard), nice link (umbrel.your-tailnet.ts.net), secure end-to-end encrypted. No ports open.
Steps:
- Umbrel App Store → search “Tailscale” → Install.
- Open Tailscale app → Authenticate → log in with Google/Apple/GitHub (free account).
- Toggle VPN on.
- On phone/laptop: login.tailscale.com → log in with same account → see your “umbrel” node.
- Click the node → copy Magic DNS name (e.g., umbrel.tail12345c.ts.net).
- Open browser → http://”serverName”.tail2345c.ts.net (without https!).
- Dashboard loads → Nextcloud at http://…/nextcloud.
Mobile:
- Install Tailscale app (iOS/Android) → login → auto-connect.
- Nextcloud app: server = http://”serverName.tail12345c.ts.net/nextcloud.
Screenshot: [Tailscale admin → Magic DNS name]
Warning: Some apps require HTTPS → choose Option 3 or stick with Tor.
Option 3: Tailscale HTTPS – Advanced (Green Padlock)
Warning: This requires terminal commands. Not for beginners. HTTP is often sufficient (secure via Tailscale).
Steps:
- Umbrel App Store → install & authenticate Tailscale (as in Option 2).
- Settings → Advanced → Terminal → select App: Tailscale.
- Run:
tailscale serve 8080 (or 8081 if Umbrel uses 8081 – check with netstat in main terminal).
- Check:
tailscale serve status → see proxy to 127.0.0.1:8080.
- Test: https://umbrel.tail63975b.ts.net (should now load with green padlock).
Make persistent (optional): Run in screen or create startup script via Portainer.
Common Mistakes & Fixes:
- Permission denied on docker? Use sudo:
sudo docker ps | grep nextcloud → container name is often nextcloud_web_1.
- “Access through untrusted domain”? Fix trusted_domains:
💸 Support the Open Internet Manifest ❤️
This manifest only exists thanks to your donations.
Every satoshi or monero helps enormously (servers, domains, development).
Donate anonymously in crypto
| Cryptocurrency |
QR-code (click to enlarge) |
Address (click to copy) |
| Bitcoin (BTC) |
|
bc1qn0wpgqc9g22hpcyeu8687tdv3gg83rnvksrydm |
| Monero (XMR) |
|
85J34VDW5wSJG6yuWXyYzB4ScedX7k4FJZktSk1VMo2uRHFWoPjB9cXKGiEkvw1SvoQrMXdxwnrVPZVzJx9MrPe4HoPYbFu |
Monero tip: with Cake Wallet or the official GUI every donor automatically gets a unique subaddress → maximum privacy.
Thank you so much for your support — you keep this project alive! 🚀
🔒 Verify integrity of this page (SHA256)
How to verify?
- Copy the page text with the button below
- Go to an online SHA256 tool, e.g. this one.
- Paste the text and calculate the hash.
- Paste the hash below and click "Verify".