> ## Documentation Index
> Fetch the complete documentation index at: https://tunnelfleet.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Protocols

> Install, uninstall, repair, and download OpenVPN client configs on a TunnelFleet server.

Open a server and select the **Protocols** tab. Each protocol appears as a card with its status and a **⋯** menu.

TunnelFleet supports:

| Protocol    | Default port |
| ----------- | ------------ |
| WireGuard   | 51820/UDP    |
| OpenVPN UDP | 1194/UDP     |
| OpenVPN TCP | 443/TCP      |

## Status

| Status                                          | Meaning                                      |
| ----------------------------------------------- | -------------------------------------------- |
| **Not installed**                               | Protocol is available but not on this server |
| **active**                                      | Installed and running                        |
| **installing** / **uninstalling** / **pending** | Change in progress                           |
| **failed** / **stopped**                        | Needs attention — try Repair                 |

<Warning>
  The TunnelFleet agent must be **online** (seen within about two minutes) to Install, Uninstall, or Repair. If the menu shows **Install (agent offline)** or similar, start the agent on the VPS first.
</Warning>

## Install a protocol

<Steps>
  <Step title="Open the protocol menu">
    On a protocol marked **Not installed**, click **⋯**.
  </Step>

  <Step title="Click Install">
    Choose **Install**. The dashboard shows a toast while the agent runs install, configure, firewall, and verify on the server.
  </Step>

  <Step title="Wait for active">
    When finished, the status becomes **active**. Pending agent commands may appear above the protocol grid while work runs.
  </Step>
</Steps>

### After install

* **OpenVPN** — existing VPN users may not have passwords on the new protocol yet. Open **Users** and click **Sync to all protocols** for each user that needs access.
* **WireGuard** — TunnelFleet provisions WireGuard peers for users that do not already have a config.

## Download OpenVPN client config

For an **active** OpenVPN TCP or OpenVPN UDP protocol:

1. Click **⋯**
2. Choose **Download Client Config**
3. Save the `.ovpn` file (for example `{server}-openvpn-udp.ovpn`)

This file is the **server-wide** OpenVPN profile. Every VPN user imports the same file and signs in with their own username and password.

WireGuard configs are per user — download those from the [Users](/docs/servers/users) tab instead.

## Repair a protocol

Use repair when a protocol is broken, misconfigured, or missing firewall rules.

From **⋯** you can open repair with different defaults:

| Menu item            | Default phases                 |
| -------------------- | ------------------------------ |
| **Repair Configure** | Configure                      |
| **Repair Firewall**  | Firewall                       |
| **Full Reinstall**   | Install + Configure + Firewall |

In the **Repair** dialog, select phases:

| Phase         | What it does                          |
| ------------- | ------------------------------------- |
| **Install**   | Reinstall the package / container     |
| **Configure** | Rewrite config files and certificates |
| **Firewall**  | Re-apply firewall rules               |
| **Verify**    | Run verification checks               |

Click **Run on Server**. The repair runs in the background on the VPS.

## Uninstall a protocol

<Steps>
  <Step title="Open Uninstall">
    On an installed WireGuard or OpenVPN protocol, click **⋯** → **Uninstall**.
  </Step>

  <Step title="Confirm">
    Read the warning: TunnelFleet stops and removes the container, deletes its config directory, and closes its firewall port(s). Users lose access for that protocol until you reinstall.
  </Step>

  <Step title="Uninstall">
    Click **Uninstall** and wait until the card shows **Not installed**.
  </Step>
</Steps>

Uninstalling WireGuard clears WireGuard keys and configs on VPN users for that server.

## Related

* [Users](/docs/servers/users) — add users and download WireGuard / OpenVPN credentials
* [Logs](/docs/servers/logs) — stream protocol logs from **Observe**
* [Settings](/docs/servers/settings) — archive, transfer, or delete the server