Connect to CapyArk

Every CapyArk account gets its own private, encrypted network. This guide takes you from a fresh account to a verified connection with your storage node — the one-time setup every other guide builds on.

How the connection works

Your storage node is never exposed to the public internet. Instead, it joins a private Tailscale network (built on WireGuard) that only your devices can access. You install the Tailscale client (open source) on each machine you want to back up, join it to your network with a one-time key from the portal, and from then on your storage node is reachable by hostname — encrypted end to end.

Step 1 — Create your account

Sign up at app.capyark.io/register and pick a plan — every plan starts with a 14-day free trial.
Verify your email with the code we send you.
Wait for your storage node to provision. Within a couple of minutes, the Connect tab in the portal shows your node as Online.

Step 2 — Install Tailscale on your machine

Install the client on the machine you want to back up — tailscale.com/download has packages for every platform:

# Debian / Ubuntu
curl -fsSL https://tailscale.com/install.sh | sh

# macOS
brew install tailscale

# Windows — download the installer from tailscale.com/download

Tailscale is the open-source client; the coordination server is hosted by CapyArk, not by Tailscale Inc. Your device list and network keys never leave our infrastructure.

Step 3 — Join your private network

In the portal, open Connect and click Add device.
The portal generates a one-time auth key and shows you the exact command, which looks like:

tailscale up \
  --login-server=https://vpn.capyark.io \
  --auth-key=YOUR-ONE-TIME-KEY \
  --hostname=my-laptop

Run it on your machine. Pick a --hostname you’ll recognize — it appears in the portal’s device list.

The auth key is single-use and expires — if it times out before you use it, just generate a new one.

Step 4 — Verify the connection

tailscale status

You should see your storage node — hostname storage-baas_xxxxx — listed as a peer. Then confirm you can reach it:

ping storage-baas_xxxxx
ssh storage-baas_xxxxx

The SSH login uses the password you set during registration (or an SSH key if you’ve added one). A restricted-shell message is expected — CapyArk intentionally allows only file-transfer commands, no interactive shell.

Step 5 — Send your first file

echo "hello capyark" > test.txt
rsync -av test.txt storage-baas_xxxxx:/backup/

Check the Storage tab in the portal — your usage will tick up after the next usage report (within a few minutes). That’s it: you’re connected.

Next steps

Back up with rsync — schedule automatic backups
Choose a backup tool — GUI and encrypted alternatives to rsync
Enable two-factor authentication — 2 minutes, strongly recommended

Troubleshooting

The portal shows my storage node as Offline Provisioning can take a few minutes after registration. If it stays offline for more than 15 minutes, contact support@capyark.com.

tailscale up says the auth key is invalid or expired Keys are one-time-use. Generate a fresh one from Connect → Add device.

tailscale status shows the storage node but ping fails Run tailscale ping storage-baas_xxxxx — if that works, the network is fine and your local firewall is blocking ICMP; SSH will still work.

I hit my plan’s device limit Each plan includes a set number of connected devices. Remove an old device in Connect, or upgrade your plan.