DAMM Companion

Inspect, reissue, or recover a DAMM profile without guessing what is inside it.

This page is the companion surface after the main onboarding wizard. Use it when you already have a DAMM link or profile and want to inspect the exact WireGuard config, reissue it from a real server URL, or recover cleanly on this device.

First time here? Use the one-click wizard. The browser still does not run the VPN tunnel itself. The honest boundary is: get or inspect the profile here, then import it into WireGuard or the OS networking stack.
Inspecting this device now.
Use the one-click wizard Inspect or issue manually Install WireGuard Recover if setup fails

Inspect or issue a profile manually

Use this when you need to inspect the exact profile inputs or reissue manually. DAMM should make sensible assumptions for this device first, then let you assert preferences where they matter. Local key generation stays on the device. The control plane only receives the public key and returns the peer material needed to render a WireGuard profile.

Sensible defaults
  • Your device name and profile filename are prefilled from the detected platform.
  • If you are unsure about region or exit country, leave them blank and let DAMM choose.
  • The only hard requirements are a real DAMM server URL and a real enrollment token.
How this should feel
  • Open a personalized DAMM link that already carries your server URL and token.
  • Review or tweak the optional preferences.
  • Tap one button to issue the profile for this device, then import it into WireGuard.
Ready. The fastest path is a personalized DAMM install link that already carries your server URL and token. If you have them separately, paste them here and leave the optional preferences blank unless you know you need them.

Profile summary

Tunnel
No profile loaded
Endpoint
-
Address
-
DNS
-
Generate profile now
What to do next
  • Use the issue form above if you do not already have a DAMM profile for this device.
  • Once a profile is issued, this panel will show the real endpoint, address, and DNS before you import it.
  • Import the downloaded .conf file into WireGuard and activate it there.
No issued profile yet. The next useful action is above: issue one for this device.

Already have a DAMM profile?

This path is for users who already have a profile file. It is no longer the primary onboarding path.
Advanced debug: load traced validation artifact
No traced DAMM profile artifact is currently published into this site build.
This proves repo validation. It is not automatically your live access path.

Import steps for this platform

Platform instructions Onboarding boundary

Recovery and failure handling

If issuance fails
  • Check that the DAMM server URL is reachable from this device.
  • Check that the token is current and intended for enrollment, not admin use.
  • If the browser lacks X25519 support, issue the profile through the CLI or a newer browser.
If import fails
  • Make sure the native WireGuard app is installed.
  • Import the downloaded .conf file inside WireGuard.
  • If the endpoint is stale, reissue here rather than editing the file by hand.
The old failure mode, now demoted

Loading a traced reference profile proves DAMM validation. It does not provision your device. This page now treats that artifact as debugging material, not as the primary onboarding story.

Current profile

Local issuance and profile handling happen entirely in this browser until you import the resulting profile into WireGuard.