20 replies

TailScale + Docker = "pairing required"

✅Solved

I'm attempting to set up OpenClaw gateway in a Docker container on my Synology NAS, and then connect to it with TailScale.

As per the advice I found on other help threads, I have tweaked the provided docker-compose.yml to specify

network_mode: host

network_mode: host

on the gateway container, and I have not specified a

"tailscale"

"tailscale"

configuration, since the tailscale CLI is not available inside my container.

I have this gateway config:

  "gateway": {
    "mode": "local",
    "auth": {
      "mode": "token",
      "token": "[REDACTED]"
    },
    "port": 18789,
    "bind": "loopback",
    "trustedProxies": [
      "127.0.0.1"
    ]
  },

  "gateway": {
    "mode": "local",
    "auth": {
      "mode": "token",
      "token": "[REDACTED]"
    },
    "port": 18789,
    "bind": "loopback",
    "trustedProxies": [
      "127.0.0.1"
    ]
  },

and I run

sudo tailscale serve --bg 18789

sudo tailscale serve --bg 18789

manually on my Synology host, since OpenClaw's built-in TailScale support can't run the

tailscale

tailscale

CLI tool from inside the Docker container.

With all this done, I can visit the Gateway web UI in a browser using https://<magicDNS>/; and can connect by entering the token in the settings.

After that, I'm still stuck, however: the web UI says "disconnected (1008): pairing required", and I can't figure out any way to approve the pairing of a new web UI user.

Solution

@Kevin Yank That’s expected: the Control UI itself is treated as a “device” and (when you connect remotely: LAN/Tailnet/Serve) it needs a one-time device pairing approval. Token auth alone isn’t enough, so the WS gets closed with 1008 “pairing required” until you approve that browser.

Approve it from the machine/container that has the Gateway’s state dir:

# list pending browser/device pairing requests
docker compose run --rm openclaw-cli devices list

# approve the pending request (use the requestId shown above)
docker compose run --rm openclaw-cli devices approve <requestId>

# list pending browser/device pairing requests
docker compose run --rm openclaw-cli devices list

# approve the pending request (use the requestId shown above)
docker compose run --rm openclaw-cli devices approve <requestId>

Then reload the web UI and it should connect.

If you want to re-grab the dashboard link/token (sometimes helpful while debugging):

Jump to solution

FotC�

Friends of the Crustacean 🦞🤝•6d ago•

20 replies

Kevin Yank

TailScale + Docker = "pairing required"

✅Solved

network_mode: host

network_mode: host

on the gateway container, and I have not specified a

"tailscale"

"tailscale"

configuration, since the tailscale CLI is not available inside my container.

I have this gateway config:

  "gateway": {
    "mode": "local",
    "auth": {
      "mode": "token",
      "token": "[REDACTED]"
    },
    "port": 18789,
    "bind": "loopback",
    "trustedProxies": [
      "127.0.0.1"
    ]
  },

  "gateway": {
    "mode": "local",
    "auth": {
      "mode": "token",
      "token": "[REDACTED]"
    },
    "port": 18789,
    "bind": "loopback",
    "trustedProxies": [
      "127.0.0.1"
    ]
  },

and I run

sudo tailscale serve --bg 18789

sudo tailscale serve --bg 18789

manually on my Synology host, since OpenClaw's built-in TailScale support can't run the

tailscale

tailscale

Solution

# list pending browser/device pairing requests
docker compose run --rm openclaw-cli devices list

# approve the pending request (use the requestId shown above)
docker compose run --rm openclaw-cli devices approve <requestId>

# list pending browser/device pairing requests
docker compose run --rm openclaw-cli devices list

# approve the pending request (use the requestId shown above)
docker compose run --rm openclaw-cli devices approve <requestId>

Then reload the web UI and it should connect.

If you want to re-grab the dashboard link/token (sometimes helpful while debugging):

Jump to solution

TailScale + Docker = "pairing required"

TailScale + Docker = "pairing required"

Similar Threads

Similar Threads

Similar Threads