Backup and Restore

Backup and Restore

System → Configuration backup downloads a JSON file generated in your browser from the device's own settings. Nothing is uploaded anywhere.

Included

Network and access-point settings, system settings, DHCP reservations, AP-side port forwards, Tailscale settings (without the auth key), firewall lists, Wake-on-LAN devices, MQTT and ntfy settings and LAN → Tailnet rules.

Secrets (Wi-Fi passwords, auth key, MQTT password, ntfy token…) are included only if you choose include secrets and set a passphrase; they are encrypted in the browser and cannot be restored without it.

Not included: the web password, the Tailscale node identity, rule expiry timers, Ethernet and Service watch settings, logs.

Restore

System → Restore applies the sections in order through the same validated endpoints as the forms. A wrong passphrase stops the restore before anything changes; a failing section stops with its name (earlier sections stay applied). When every section succeeds the device restarts.

Restored LAN → Tailnet rules keep their saved enabled state: review them, because a rule's exposure depends on today's network.

Also available: service-rule export/import (imported rules forced off), "Restore previous settings" after guided setups, one rollback level for configuration profiles.

Full guide: BACKUP-RESTORE.md.