update

docs/port_forwarding.md

@@ -17,7 +17,11 @@ This service is provided by the ISP.
 
 !!! warning
 
-    * **[Change passwords](first_steps.md#getting-access-to-pikvm) before opening access to PiKVM from the outside Internet.**
-    * It's also a good practice to use only HTTPS with a valid SSL certificate (like [Let's Encrypt](letsencrypt.md)).
-        and using a custom port number instead of `443` from the Internet side, for example `14438` to avoid common port scanners.
+    * **[Set strong passwords and enable two-factor authorization](auth.md)
+        before opening access to PiKVM from the Internet!**
+    * It is strongly recommended to obtain a valid HTTPS certificate, for example via [Let's Encrypt](letsencrypt.md).
+    * A good practice is using a custom port number instead of `443` from the Internet side, for example `14438` to avoid common port scanners.
     * If you still decide to use the `443` port number, you may have to forward port `80` to get a redirect for your convenience.
+
+Remember that port forwarding is a powerful and convenient tool, but security depends entirely on the user.
+In some cases, a VPN may be a more secure, but less convenient option (since it requires a VPN client on all devices that access PiKVM).

docs/tailscale.md

@@ -1,42 +1,64 @@
 # Tailscale VPN
 
-[Tailscale](https://tailscale.com/) can be used to access PiKVM on the internal network. This is a convenient and free (for private use) tool for organizing a small VPN network. This document is provided as an example for accessing your pikvm over the inet but you can also use zerotier or remote.it. Basic support like whats shown below is provided as an example, any other setting or functionality needs to be redirected to the appropriate community.
+The [Tailscale](https://tailscale.com/) can be used to access PiKVM from the Internet
+when using [port forwarding](port_forwarding.md) is not possible or does not seem secure enough.
+Tailscale is a convenient and free (for private use) tool for organizing a small VPN network.
 
 
+-----
 ## Installation
 
+Basic support like whats shown below is provided as an example,
+any other setting or functionality needs to be redirected to the [Tailscale support](https://tailscale.com/contact/support/).
+
+
 ### On the PiKVM side
 
-1. Use these commands:
+1. Execute these commands:
 
     ```
     # rw
-    # pacman -Syu tailscale-pikvm
+    # pacman -Syu
+    # pacman -S tailscale-pikvm
     # systemctl enable --now tailscaled
     # tailscale up
     ```
 
 2. Follow the link to authorize this installation.
 
-3. After success, perform soft reboot using `reboot` command to make sure that everything will work correctly.
+3. After success, perform soft reboot using the `reboot` command to make sure that everything is working correctly.
+
+4. Perform the command `ip addr show tailscale0` to view the Tailscale IP address.
 
-4. Perform command `ip addr show tailscale0` to view the Tailscale IP address.
+!!! warning
+    Unfortunately sometimes updating the Tailscale client on PiKVM can cause problems.
+    This is happening because features of its interaction with PiKVM OS running in protected read-only mode
+    (since Tailscale has weak support of read-only systems).
 
+    Do not update Tailscale if you don't have access to the device without VPN,
+    because on breaking change in Tailscale, you may lose access to PiKVM.
 
-### For each device you wish to access pikvm
 
-* [Download](https://tailscale.com/download) and install tailscale for your OS to the system you are using, not to the system you want to control.
+### For each device you wish to access PiKVM
+
+* [Download](https://tailscale.com/download) and install the Tailscale client for your OS
+    to the system you are using (not to the system you want to control).
 * Check the [admin page](https://login.tailscale.com/admin/machines) to view your VPN network.
 * Follow the URL in the web browser: `https://<tailscale_kvm_ip>` and you will see PiKVM web interface.
 
-??? note
-    * BASIC troubleshooting in case this fails in some way: Uninstall tailscale, remove these dirs /var/lib/tailscale /var/cache/tailscale and reinstall
-    
-    ```
-    # pacman -Rscnd tailscale
-    # rm -rf /var/lib/tailscale /var/cache/tailscale
-    # reboot
-    ```
-    
-    * Follow the above instructions to reinstall
-    
+
+----
+## Troubleshooting
+
+If something not work, the usual advice is to completely remove the Tailscale from PiKVM and perform a clean installation.
+
+To remove follow this:
+
+```
+# rw
+# pacman -Rscnd tailscale
+# rm -rf /var/lib/tailscale /var/cache/tailscale
+# reboot
+```
+
+Next. follow this document from the beginning to install the Tailscale again.