Deploy a Gateway on Debian / Ubuntu

Install the Firezone Gateway on Debian- or Ubuntu-based distributions from the Firezone APT repository. The package installs the firezone CLI and a systemd service that keeps the Gateway running.

Before you start, open Sites → <your Site> → Deploy a Gateway in the admin portal and keep the token handy — you'll paste it in below. Review the sizing guidelines to choose a host first.

Step 1: Add the Firezone APT repository

sudo mkdir --parents /etc/apt/keyrings
wget -qO- https://artifacts.firezone.dev/apt/key.gpg | sudo gpg --dearmor -o /etc/apt/keyrings/firezone.gpg
echo "deb [signed-by=/etc/apt/keyrings/firezone.gpg] https://artifacts.firezone.dev/apt/ stable main" | sudo tee /etc/apt/sources.list.d/firezone.list > /dev/null

Step 2: Install the Gateway

sudo apt update
sudo apt install firezone-gateway

Step 3: Authenticate the Gateway

sudo firezone gateway authenticate

Paste the token from the admin portal when prompted. The Gateway registers with your Site and runs as the firezone-gateway systemd service.

Manage the Gateway with the firezone CLI. See the Gateway CLI reference for environment variables and flags, and upgrading to keep it current.


Need help? See all support options.

Found a problem with this page? Open an issue
Last updated: July 01, 2026