Make OpenClaw remotely accessible via Tailscale
Want to use OpenClaw on the go โ phone on the train, laptop in a hotel? Tailscale is the elegant solution. Here's the setup.
Install Tailscale
On the OpenClaw server (Mac mini, Linux VM):
brew install tailscale # macOS
sudo tailscale upOn Linux: curl -fsSL https://tailscale.com/install.sh | sh. You get a MagicDNS URL: hostname.tailnet.ts.net.
Add mobile devices
Install the Tailscale app on iPhone/iPad/Android, sign in with your Tailscale account. Devices appear in the tailnet, can reach the OpenClaw server.
Expose canvas via Tailscale
tailscale serve --bg http://127.0.0.1:18789Canvas now visible at https://hostname.tailnet.ts.net โ only to tailnet members.
ACLs for granular control
Tailscale admin panel โ Access Controls. Per group define which devices see what. Example: sales team sees the canvas, IT sees the daemon API, externals see nothing.
Off-switch on loss
If a staff member loses their phone: Tailscale admin โ Device โ "Disable". Immediate loss of tailnet access.