Netmaker Client App
Official Netmaker WireGuard client for Home Assistant. Joins a Netmaker mesh network as a plain peer.
About
This app runs the official Netmaker netclient to connect Home Assistant to your Netmaker-managed WireGuard mesh. It enrolls with your controller and keeps the daemon running so peer configuration stays in sync.
Features
- WireGuard mesh connectivity via Netmaker
- Official
netclient join + daemon
- Automatic restart on failure
- Debug logging for interfaces and routes
Installation
- Add the J0rsa repository to your Home Assistant
- Search for “Netmaker Client” in the App Store
- Click Install and wait for the download to complete
- Configure your Netmaker enrollment token
- Start the app
Configuration
Required Settings
| Option |
Description |
host_name |
Device name in Netmaker network (default: homeassistant-netmaker) |
netclient_token |
Enrollment token from Netmaker dashboard |
Optional Settings
| Option |
Description |
Default |
debug_mode |
Log interfaces/routes after join |
false |
auto_restart |
Auto restart on failure |
true |
Example Configuration
host_name: "homeassistant-netmaker"
netclient_token: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."
debug_mode: false
auto_restart: true
Setup Instructions
- Ensure your Netmaker API is reachable over HTTPS (e.g. Cloudflare Tunnel)
- Create an enrollment key in the Netmaker dashboard
- Enter
host_name and netclient_token in the app options
- Start the app — it joins and runs
netclient daemon
How It Works
Home Assistant → netclient → Netmaker API (HTTPS) + MQTT
→ WireGuard mesh peers
netclient join enrolls this host
netclient daemon maintains peers and signaling
- Traffic follows Netmaker network policy (no local SOCKS redirection)
Troubleshooting
Enable Debug Mode
Set debug_mode: true for additional interface and route logging after join.
Common Issues
| Issue |
Solution |
| “Netclient token is required” |
Provide a valid enrollment token |
| “Failed to join network” |
Verify token and API HTTPS reachability |
| EOF / connection errors on join |
Confirm Cloudflare Tunnel or reverse proxy is healthy |
Network Requirements
- Host networking (
host_network: true)
NET_ADMIN capability
- Access to
/dev/net/tun
- Outbound HTTPS to your Netmaker API
- Outbound connectivity to the MQ broker used by the controller
Support