Run your own TAK server

Free, self-hosted, and your team’s positions never reach a ZYRNTOPO server.

The short version: one command installs a single program on Linux, macOS, Windows or a Raspberry Pi. No Docker and nothing else to install. ZYRNTOPO, ATAK, WinTAK and iTAK all connect to it, and your team's positions, messages and markers stay on hardware you own.

1. Install it

Linux, Raspberry Pi or macOS

curl -fsSL https://zyrntopo.com/tak-server.sh | sh

Windows, in PowerShell

irm https://zyrntopo.com/tak-server.ps1 | iex

It downloads the server for your system, checks its SHA-256, and sets it up: certificates, a background service that starts at boot, firewall rules, and a first user called team. It then sends a test position through the server both ways before it tells you it is ready. It takes under a minute.

Running it again is safe and is how you update or repair it. Certificates and users are kept.

2. What you need

A computer that stays on: a Raspberry Pi (any model from the 2 onward), a spare laptop, a desktop or a small VPS. Linux, macOS 11 or later, or Windows 10 / 11. Administrator or sudo rights for the install.

On a VPS, check the provider firewall too. Open TCP 8089, 8090, 8443 and 8446 there as well.

3. Connect your devices

App	How
ZYRNTOPO	Team Sync ▸ TAK server ▸ My own TAK server, address `ws://<server>:8090`
ATAK, WinTAK, iTAK	Open `https://<server>:8446` on the device, sign in, download the package and open it in the app
ATAK	Or scan the QR code the installer prints
iTAK	Or add server `<server>`, port 8089, SSL, and sign in

The installer prints the server address, the team password and the QR code. The package is also saved on the server, ready to copy to a device.

4. Ports

Port	Used by
`8090`	ZYRNTOPO
`8089`	ATAK, WinTAK, iTAK
`8443`	File and data package sharing between TAK apps
`8446`	Package download and certificate enrollment

5. Reaching it from outside your network

On one network the printed address is all anyone needs. For a team spread out, install Tailscale on the server and the devices, then run:

Publish over Tailscale

sudo zyrn-tak setup --tailscale

It prints a wss:// address that also works from the ZYRNTOPO web app.

6. Running it

Command	What it does
`zyrn-tak status`	Is it running, who is connected, does a test position get through
`zyrn-tak user add NAME`	Add a person and make their package and QR code
`zyrn-tak user remove NAME`	Remove a person and revoke their certificates
`zyrn-tak user list`	List users
`zyrn-tak logs`	Show recent log lines
`zyrn-tak restart`	Restart the service
`zyrn-tak uninstall`	Remove it, keep the data (`--purge` deletes the data too)

On Linux and macOS put sudo in front of commands that change something. On Windows run them in an Administrator PowerShell.

Back up the data folder. It holds the certificate authority every device trusts: /var/lib/zyrn-tak on Linux, /Library/Application Support/ZYRN TAK on macOS, C:\ProgramData\ZYRN TAK on Windows.

7. More

Team Sync, the ZYRNTOPO TAK server and TAK apps on your local network are covered in the Team Sync documentation.