Secure Remote Access with Tailscale

Access Dori securely from your phone or laptop anywhere in the world without exposing public ports, using a private Tailscale network.

How to connect your phone, laptop, or remote VPS to Dori over a private, end-to-end encrypted mesh network.

Why Tailscale Keeps Dori 100% Private

When running Dori Desktop on your Mac or Dori Engine on a Linux VPS, your vault files, meeting transcripts, and project notes contain sensitive business data.

Exposing web ports (8002) to the public internet opens your server to port scanners and brute-force attacks.

With Tailscale:

Zero Open Ports: Dori binds strictly to 127.0.0.1 (loopback) or your private Tailscale IP. No router port forwarding or public DNS required.
End-to-End Encryption: Data between your phone and Dori is encrypted using peer-to-peer WireGuard® tunnels.
MagicDNS Device Names: Access Dori using simple human-readable names like http://dori-mac:8002 or http://dori-vps:8002.

Setup Guide (3 Simple Steps)

Step 1: Install Tailscale on Your Host Device (Mac or VPS)

Install Tailscale on the device running Dori:

Download Tailscale for macOS from the Mac App Store or standalone installer.
Open Tailscale and log in with your account (Google, GitHub, Microsoft, or SSO).
Click Connect in the menu bar.

Run the official automated Tailscale installer on your Linux server:

curl -fsSL https://tailscale.com/install.sh | sh
sudo tailscale up

Authenticate the machine by clicking the printed Tailscale login link.

Step 2: Install Tailscale on Your Mobile Phone or Remote Laptop

Install the official Tailscale client on the devices you want to use to reach Dori on the go:

iOS / iPhone: Download Tailscale on the App Store.
Android: Download Tailscale on Google Play.
Secondary Laptop: Download Tailscale for Windows / Mac / Linux.

Log in to the same Tailscale account on your mobile device. Your phone and host machine are now part of your private, encrypted Tailnet!

Step 3: Connect to Dori Remotely

Once both devices are connected to Tailscale:

Open Tailscale on your host machine to find its 100.x.y.z Tailscale IP or MagicDNS hostname (e.g. dori-mac).
On your mobile browser or remote laptop, navigate to:
- http://100.x.y.z:8002 or http://dori-mac:8002
Enter your Engine Auth Token (found under Settings → Connections in Dori Desktop).

Troubleshooting & Security Check

Device status check: Run tailscale status in a terminal to confirm host and client devices are active.
Engine Auth Token: Keep Engine Host Auth enabled under Settings → Connections in Dori so even devices on your Tailnet require a bearer token.

Next Steps

Capture voice notes from mobile: See Reach Dori from your phone.
Set up WhatsApp messaging: See Capture on the go with WhatsApp.