nixscale
Sign up

Labels

Group machines with labels, assign labels to devices and learn how labels work with rules.

For:AdminOwnerUpdated September 15, 2026

A label is a machine's identity: you assign it to servers, gateways and shared devices, and use it as the source or destination of rules. For example, give every database server the db label and a single rule grants access to all of them.

For people, use people groups instead of labels.

Built-in labels

Every network comes with these labels: users, server, app, db, external. You can use them or create your own.

The network page's Labels section shows how many devices carry each label and how many rules use it.

Create a label

In Labels, type a name in the + New label field and click Add label.

Label names can only contain lowercase letters and digits; they must start with a letter and be at most 32 characters. Dashes, spaces and accented characters aren't allowed: database is valid, data-base isn't.

You can also create a label from a device row's label menu (+ New label…) or from the rule form.

Assign a label to a device

The best time to label a device is when you add it: choose Machine / server in the Add device form and pick the label. The device joins the network already labeled.

To label a device that's already connected:

  1. Open the device's label field

    In Devices, click Change next to Label on the device's row.

  2. Pick a label

    Choose a label from the list.

  3. Confirm for a personal computer

    If the device had no label, a confirmation dialog opens. Read the consequences and click Yes, mark as a machine.

Delete a label

In Labels, click Delete next to the label.

  • A label that devices still carry can't be deleted; the button is disabled. Move those devices to another label or delete them first.
  • Rules that use the label are deleted with it. The confirmation dialog tells you how many.

Labels and rules

When you pick a label as the source or destination of a rule, the rule covers every machine that carries it. Give a new machine the same label and the rules apply to it automatically. Local networks a machine shares, once approved, also become part of that machine's label.

To write rules, see Rules.