Client Installation Guide

Secure Tunnel Client — Linux Installation Guide

Run the installer on the Secure Tunnel Client (Linux/Debian) with a single command. It downloads the script, then walks through initial setup.

curl -fsSL https://raw.githubusercontent.com/Cal4Care-Developers/proxytunnel/master/install.sh -o /tmp/install.sh

# Make executable and run

chmod +x /tmp/install.sh

sudo /tmp/install.sh

Common install flags

• sudo /tmp/install.sh --yes — re-run after a partial failure; uses the existing config and skips steps that already succeeded.
• sudo /tmp/install.sh --reconfigure — change the PBX domain or auth-key; re-prompts everything from scratch.
• sudo /tmp/install.sh --reinstall — force re-download of Go and re-clone the repo (e.g. when the pinned Go version is upgraded).

ℹ Run the plain command first on a new device. Only reach for --yes, --reconfigure, or --reinstall when re-running on a device that’s already been through setup once.

2. Uninstall Command

Removes the RingQ tunnel software from the Secure Tunnel Client. Download and run the uninstall script the same way the installer was run.

# Download and run uninstall script

curl -fsSL https://raw.githubusercontent.com/Cal4Care-Developers/proxytunnel/master/uninstall.sh -o /tmp/uninstall.sh

chmod +x /tmp/uninstall.sh

sudo /tmp/uninstall.sh

3. Check Status

Run a one-shot status check to confirm the tunnel is up and running.

# one-shot status

ringqtunnel-status

4. What Does NOT Need Configuration

💡

• No UDP port for SIP from PBX to Secure Tunnel Client — the TCP tunnel handles all directions

• No STUN server — the proxy detects its public IP via the bind API response

• No OpenVPN / IPSec — the TCP/6010 tunnel IS the secure channel

• No port-forwarding for phones — phones talk to the Secure Tunnel Client on the LAN only