Phone over HTTPS on your tailnet
Turn on HTTPS for your Tailscale network so the Murage phone app gets its secure address, keep the computer awake for the phone, and what Wi-Fi pairing does and does not protect.
Turn on HTTPS for your tailnet
Allow remote access is the switch that puts Murage behind your tailnet's HTTPS address. When the tailnet has no certificates yet, the switch stays off and the line under it reads Off. Your tailnet needs HTTPS turned on first. The steps are below. The steps are the same ones Murage shows you.
Step 1
Open the Tailscale DNS page
Choose Open Tailscale DNS settings in Murage, or go to the DNS page of the Tailscale admin console yourself. Sign in with the account your tailnet uses.
You're done when: the DNS page is open and you are signed in.
Step 2
Check MagicDNS
Make sure MagicDNS is on. HTTPS certificates need it.
You're done when: MagicDNS is on.
Step 3
Enable HTTPS
Under HTTPS Certificates, choose Enable HTTPS. It is a one-time switch for your whole tailnet, so you do this once, however many computers you run Murage on.
You're done when: the page says HTTPS certificates are enabled.
Step 4
Turn on Allow remote access again
Come back to Murage and switch Allow remote access on.
You're done when: the line reads On. Any device signed into your tailnet can open followed by your address.
Until HTTPS is on, a browser on your tailnet can still open Murage at its plain address. The phone app cannot. It needs the secure one. And if Tailscale is not installed on the computer at all, Murage says Tailscale is not installed on this computer, so there is no secure address to serve.
The phone says to check HTTPS
You see
Check this computer's HTTPS connectionDo this
The phone app reached your computer but could not verify the certificate for the address. It is either not there yet or not current. On the computer, open SettingsPhone and other devices, follow the HTTPS steps above, then choose Try again on the phone.
Keep the computer awake
Your phone reaches Murage through your computer, so it cannot answer while the computer is asleep. In SettingsPhone and other devices, switch on Keep this computer awake while a phone is paired. It stops the computer going to sleep on its own.
It cannot stop a lid. Closing a laptop still puts it to sleep, so leave the laptop open, or run Murage on a desktop.
Wi-Fi pairing
Without Tailscale, a phone can pair on the same Wi-Fi as the computer. That path is not encrypted. Anyone on the same network could read what your phone and this computer send. For that reason Wi-Fi pairing is off unless you choose Turn on Wi-Fi pairing, and Murage says so when you do.
You see
Wi-Fi pairing is now off unless you choose it, because it is not encrypted. A phone that paired over Wi-Fi can't reach this computer until you turn it back on. Phones that use Tailscale are not affected.Do this
Choose Keep it off and pair over Tailscale instead, which encrypts the path. Or choose Turn on Wi-Fi pairing if the network is one you trust, such as your home Wi-Fi with nobody else on it. Never turn it on in a hotel, a coffee shop or a shared office. You can Turn off later.