VPN

Overview

The VPN page is the front door to your workspace's Tailscale tailnet. It shows whether the integration is active, lists the devices on the tailnet, points to the internal services you can reach over it, and gives you everything you need to join — install links and step-by-step instructions.

Features

• Tailnet status. A banner shows whether the Tailscale integration is active and names your tailnet.
• Device list. See every device on the tailnet with its hostname, OS, address, online/offline state and last-seen time (when an API key is configured).
• Workspace services. A handy reference of internal endpoints reachable over the tailnet — the workspace itself, Postgres, and object storage.
• Join instructions. Clear steps to install Tailscale, sign in to the workspace tailnet, and gain access to exposed services.
• Install links. One-click download buttons for macOS, Windows, Linux, iOS and Android.
• Honest setup state. When the tailnet isn't configured yet, the page explains exactly which environment variables and the Tailscale Kubernetes operator are needed to light it up.

How it works

VPN is backed by the Tailscale Kubernetes operator running in the cluster. The workspace reads tailnet status — and, with a Tailscale API key, the device list — and renders it here. Devices that sign in to the same tailnet gain access to the services the operator exposes; no ports are opened to the public internet.

Backend

Tailscale (WireGuard-based mesh VPN)

Operator

Tailscale Kubernetes operator in-cluster

Config

GROWN_TAILSCALE_TAILNET + optional GROWN_TAILSCALE_API_KEY