Skip to main content
TunnelFleet installs an agent on your VPS. The agent provisions VPN protocols, manages users, and reports status back to the dashboard.

​
DigitalOcean

If you create a server with the DigitalOcean tab, you do not run the install script yourself. TunnelFleet creates the droplet and starts the agent install automatically (cloud-init). Stay on the provisioning screen until the server is ready. See Create server and Server providers.

​
Custom VPS

Use the one-line install script when you add a server you already own.

​
Requirements

Use a fresh VPS when possible. TunnelFleet works best when it can configure Docker, firewall rules, and protocol containers without conflicting services on the same ports.

​
Install command

When you create a Custom VPS server, TunnelFleet shows a unique install command. The installer file is the same for every customer; your enrollment token is an environment variable, not part of the URL:
Verify the file before you run it:
The enrollment token authenticates the agent. Do not share it publicly. Generate a new server entry in the dashboard if the token is exposed.

​
What the installer does

  1. Registers the server with TunnelFleet
  2. Installs the TunnelFleet agent
  3. Pulls and starts protocol containers for your selection (WireGuard, OpenVPN TCP, OpenVPN UDP)
  4. Opens required firewall ports
  5. Creates the default VPN user tunnelfleet
  6. Points a hostname at your server under *.server.tunnelfleet.com

​
Provisioning phases

The dashboard tracks progress through:
  1. Waiting — waiting for the install script to start (DigitalOcean: droplet create / agent boot)
  2. Preparing — agent and host dependencies
  3. Installing protocols — WireGuard / OpenVPN containers
  4. Configuring firewall — opening protocol ports
  5. Finalising — DNS and default user
When complete, the server status becomes ready and the agent shows as online.

​
Re-running or repairing

If a protocol fails or ports change:
  1. Open the server → Protocols
  2. Use Repair to re-run install, configure, firewall, and verify phases
You usually do not need to re-run the full host install script for protocol repairs.

​
After installation

  • Confirm the agent is online on the server overview
  • Open Users to manage VPN credentials
  • Open Observe to stream protocol logs
  • Download client configs and connect

​
Uninstall / remove

To stop managing a server from TunnelFleet:
  • Archive — stops VPN containers but keeps DNS for faster restore
  • Delete — permanently removes the server from TunnelFleet (including DNS cleanup)
Your VPS itself is not deleted. On DigitalOcean, delete the droplet in your DigitalOcean account if you no longer need it. On a custom VPS, you retain SSH access and can clean up leftover packages manually if needed.