Deploy a Gateway with systemd

This method installs the Firezone Gateway as a hardened systemd service on any Linux distribution that uses systemd. It downloads the Gateway binary, installs a service unit, and starts it — all in one command.

Before you start, open Sites → <your Site> → Deploy a Gateway in the admin portal, select the systemd tab, and copy the FIREZONE_TOKEN value. Review the sizing guidelines to choose a host first.

Install

Run the installer, substituting the token and a unique ID for this Gateway:

FIREZONE_TOKEN="<your-token>" \
FIREZONE_ID="<unique-id>" \
  bash <(curl -fsSL https://raw.githubusercontent.com/firezone/firezone/main/scripts/gateway-systemd-install.sh)

The installer writes a unit to /etc/systemd/system/firezone-gateway.service, stores the token at /etc/firezone/gateway-token, and enables the service so it starts on boot.

FIREZONE_ID must be unique across all Gateways in your account. To deploy multiple Gateways in a Site, reuse the same FIREZONE_TOKEN with a different FIREZONE_ID on each host.

Manage the service

sudo systemctl status firezone-gateway   # check status
sudo journalctl -u firezone-gateway -f   # follow logs
sudo systemctl restart firezone-gateway  # restart

See the Gateway CLI reference for environment variables, and upgrading to keep the Gateway current.

Need help? See all support options.