Custom Snapmaker U1 Firmware

VPN Remote Access (Experimental)

Available in: Extended firmware only

Control your printer remotely using a VPN provider.

Warning: This feature is experimental. VPN services consume additional CPU and memory resources which may affect print quality or reliability during active prints. It is recommended to disable VPN while printing or monitor system performance closely.

Supported Providers

Enabling VPN

VPN is disabled by default.

Using firmware-config Web UI

Navigate to the firmware-config interface and select Tailscale under VPN Provider. This will automatically download and install Tailscale.

Manual Setup

Step 1: Download Tailscale (requires internet connection):

ssh root@<printer-ip>
tailscale-pkg download

Step 2: Edit extended/extended2.cfg, set the vpn:

[remote_access]
vpn: tailscale

Step 3: Start the VPN service:

/etc/init.d/S99vpn restart

Tailscale Setup

Tailscale setup requires SSH access to the printer.

Login to your tailnet:

Use the tailscale CLI up command to login. Get a login link, QR code, or use an auth token to complete the login.

tailscale up

# show your tailscale IP
tailscale status | grep lava
100.95.6.132     lava               username@  linux    -

Note: You can use tailscale up --ssh to enable tailscale SSH and bypass passwords and keys.

Features

Tailscale Certificates

Tailscale can help generate Let’s Encrypt SSL certificates for your printer, using Tailscale Serve! This will securly terminate SSL and forward requests to Fluidd/Mainsail.

tailscale serve --bg 80
tailscale serve reset # to disable

You can now browse securly to: https://lava.${YOUR_TAILNET}.ts.net/

Note: The first time you load this it will take a minute to generate the certificate for the first time. Note: Advanced users can enable Funnel to expose Fluidd/Mainsail to the public internet. Only do this if you absutely know what you are doing to stay secure. Stay safe!