← Back to Docs

Installation

Supported Platforms

  • Operating systems: Ubuntu 22.04, Ubuntu 24.04+, Debian 12, Debian 13+
  • Architectures: x86_64 and aarch64
  • Required capabilities: /dev/net/tun, net.ipv4.ip_forward=1, NET_ADMIN and NET_RAW permissions

Not supported: Ubuntu 20.04 and older, Debian 11 and older, non-Linux hosts, Windows Subsystem for Linux.

Install

Run the installer on the target machine as root or with sudo:

curl -fsSL https://get.tlsops.com/install.sh | sudo bash

To pin a specific release version instead of latest:

curl -fsSL https://get.tlsops.com/install.sh | sudo env TLSOPS_VERSION=1.2.3 bash

The installer will:

  1. Verify the cryptographic signature of the release bundle
  2. Download and extract the versioned production bundle
  3. Ensure /dev/net/tun is available and create it if needed
  4. Enable IPv4 forwarding (net.ipv4.ip_forward=1)
  5. Disable systemd-resolved if it is occupying port 53
  6. Install AdGuard Home, sing-box, and the TLSOps management binary
  7. Enable and start the tlsops systemd service

Verify the Installation

Check the service is healthy:

curl http://localhost:8080/health
# {"status":"Healthy"}

Check service status and logs:

sudo systemctl status tlsops
sudo journalctl -u tlsops -n 50

Virtual Machine Notes

The VM must be in bridged network mode so it appears on your LAN with its own IPv4 address. Host-only or isolated NAT networks will not work for gateway mode. The TUN device and NET_ADMIN capability must be available inside the VM — most hypervisors enable these by default on Linux guests.

Uninstall

To remove TLSOps completely, use the public uninstall command:

curl -fsSL https://get.tlsops.com/uninstall.sh | sudo bash

Alternatively, if TLSOps is already installed and you have the local helper available:

sudo /usr/local/sbin/uninstall-tlsops-production

The uninstaller stops all services, removes all binaries and configuration, and restores the DNS settings it changed during installation.