Make your node accessible from outside

Your Umbrel node now only runs locally (http://umbrel.local). How do you reach it safely from your phone or laptop when you’re not at home?

Below are the best methods, from simple to advanced.

Overview of methods

Method Difficulty Speed Privacy / Security Best for Setup time
Tor Onion (start) ★☆☆☆☆ Slow Maximum Maximum privacy, no account 2 minutes
Tailscale HTTP ★★☆☆☆ Fast High (WireGuard) Daily use, Nextcloud sync 5–10 minutes
Tailscale HTTPS ★★★★☆ Fast Very high Apps that require HTTPS, green padlock 15–30 minutes

Recommendation: Start with Tor. Upgrade to Tailscale when you want speed and convenience.

Option 1: Tor Onion – easiest & most private method

Why Tor?
No account, no port forwarding, works everywhere.

Steps (2 minutes):

  1. Open Umbrel dashboard (http://umbrel.local)
  2. Go to Settings → Advanced Settings → Remote Access
  3. Enable Tor
  4. Copy the generated .onion link

Access:

Nextcloud: http://your-onion-link/nextcloud (in Tor Browser).

Option 2: Tailscale HTTP – fast for daily use

Steps:

  1. Umbrel App Store → search Tailscale → install
  2. Open Tailscale → log in with Google/Apple/GitHub
  3. Enable Tailscale on your node
  4. Install Tailscale on your phone/laptop and log in with the same account
  5. Copy the Magic DNS name (e.g. umbrel.abcdef123.ts.net)
  6. Open in browser: http://umbrel.abcdef123.ts.net

Nextcloud: http://umbrel.abcdef123.ts.net/nextcloud

Option 3: Tailscale HTTPS – green padlock (advanced)

Steps:

  1. Install Tailscale (see Option 2)
  2. In Umbrel Terminal: tailscale serve 8080 (or correct port)
  3. Configure trusted domains in Nextcloud via occ commands (see below)

Common errors & fixes:

Your node is now accessible from anywhere. Next step: practical applications (Nextcloud sync, Immich, wallets) and redundancy.

⚠️ Disclaimer

Alle guides worden door de community voorgesteld en door het OIM-coreteam gecontroleerd voordat ze live gaan.

Toch blijft het uitvoeren van technische stappen jouw eigen verantwoordelijkheid.
Het Open Internet Manifest is niet aansprakelijk voor schade, dataverlies of andere problemen die kunnen ontstaan door het volgen van een guide.

💸 Support the Open Internet Manifest ❤️

This manifest only exists thanks to your donations.
Every satoshi or monero helps enormously (servers, domains, development).

Donate anonymously in crypto

Cryptocurrency QR-code (click to enlarge) Address (click to copy)
Bitcoin (BTC) Bitcoin QR bc1qn0wpgqc9g22hpcyeu8687tdv3gg83rnvksrydm
Monero (XMR) Monero QR 85J34VDW5wSJG6yuWXyYzB4ScedX7k4FJZktSk1VMo2uRHFWoPjB9cXKGiEkvw1SvoQrMXdxwnrVPZVzJx9MrPe4HoPYbFu

Monero tip: with Cake Wallet or the official GUI every donor automatically gets a unique subaddress → maximum privacy.

Thank you so much for your support — you keep this project alive! 🚀

🔒 Verify integrity of this page (SHA256)

How to verify?

  1. Copy the page text with the button below
  2. Go to an online SHA256 tool, e.g. this one
  3. Paste the text and calculate the hash
  4. Paste the hash below and click "Verify"

Verify with SHA256 hash

🗣️ Join the discussion about this page
Open Element and join the conversation
Tip: type the thesis number or topic as your first message