Commands
tailscale
Sync and discover vaults over Tailscale networks
ClawVault provides four Tailscale commands for vault networking: status, sync, serve, and discover. Each has a short alias (ts-*).
clawvault tailscale-status
Show Tailscale connection status and peers.
clawvault tailscale-status [options]
# alias: clawvault ts-statusOptions
| Flag | Description | Default |
|---|---|---|
--json | Output as JSON | false |
--peers | Show all peers including offline | false |
clawvault tailscale-sync
Sync vault with a peer on the Tailscale network.
clawvault tailscale-sync [options]
# alias: clawvault ts-syncOptions
| Flag | Description | Default |
|---|---|---|
--peer <hostname> | Peer hostname or IP to sync with | Required |
-v, --vault <path> | Vault path | Nearest vault |
--port <number> | Port on the peer | 8384 |
--direction <dir> | Sync direction: push, pull, or bidirectional | bidirectional |
--dry-run | Show what would be synced without making changes | false |
--delete-orphans | Delete files that exist locally but not on peer (pull only) | false |
--categories <list> | Comma-separated list of categories to sync | All |
--https | Use HTTPS for connection | false |
--json | Output as JSON | false |
clawvault tailscale-serve
Serve vault for sync over Tailscale.
clawvault tailscale-serve [options]
# alias: clawvault ts-serveOptions
| Flag | Description | Default |
|---|---|---|
-v, --vault <path> | Vault path | Nearest vault |
--port <number> | Port to serve on | 8384 |
--funnel | Expose via Tailscale Funnel (public internet) | false |
--background | Run in background | false |
--stop | Stop serving | false |
clawvault tailscale-discover
Discover ClawVault peers on the Tailscale network.
clawvault tailscale-discover [options]
# alias: clawvault ts-discoverOptions
| Flag | Description | Default |
|---|---|---|
--port <number> | Port to check | 8384 |
--json | Output as JSON | false |
Examples
# Check Tailscale status
clawvault ts-status
# Start serving this vault on tailnet
clawvault ts-serve
# Discover vaults on your tailnet
clawvault ts-discover
# Sync with a peer (bidirectional)
clawvault ts-sync --peer my-laptop
# Pull from peer, specific categories
clawvault ts-sync --peer server --direction pull --categories "decisions,lessons"
# Dry run to preview sync
clawvault ts-sync --peer server --dry-runDetails
The Tailscale commands use your existing Tailscale network for peer-to-peer vault synchronization. No cloud accounts or third-party sync services required — data travels directly between your machines over WireGuard tunnels.
--funnel on tailscale-serve exposes your vault API to the public internet via Tailscale Funnel. Use with caution.