12 Commits

Author SHA1 Message Date
timmy
61579dd272 chore: gitignore runtime data; untrack db.sqlite and keys
- 新增 .gitignore(data/、*bak.*)
- 停止追蹤 data/(db.sqlite 三件 + noise_private.key),避免把節點/金鑰狀態推上 repo

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-13 21:28:47 +08:00
timmy
a20835c371 fix(compose): exec-form healthcheck; enable embedded DERP (tw)
- healthcheck 改 exec 形式(distroless 映像無 /bin/sh,CMD-SHELL 永遠 unhealthy)
- 補 command: serve、對外開 3478/udp(DERP STUN)
- config.yaml 內建 DERP 設為 enabled(region tw),與線上實跑一致

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-13 21:28:47 +08:00
0e35a3d164 docs: add node naming convention and HTTP API rename method
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-21 13:56:52 +08:00
566675c693 docs: document ACL policy and Taildrive
- README: 新增「ACL 政策與 Taildrive」章節(啟用方式、現行規則、使用指令)
- OPERATIONS: 新增 ACL 政策管理 + Taildrive 操作章節
- CLAUDE.md: Core Components 加入 policy.hujson、image 改為 v0.29.0;補 policy 結構說明
- SUMMARY: 功能特色加入 ACL policy 與 Taildrive 檔案分享

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-18 18:36:46 +08:00
5e48016852 feat: enable Taildrive via ACL policy (full-mesh preserved)
新增 config/policy.hujson 並啟用 policy.path:
- acls 保留 allow-all,維持原本全互通行為
- nodeAttrs 授予所有節點 drive:share / drive:access
- grants 開放 tailscale.com/cap/drive(所有 share, rw)

已部署至伺服器並驗證:policy valid、14 節點 online、peer ping 正常、
drive 能力出現在 netmap。

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-18 18:33:08 +08:00
e404dd9036 fix: pin headscale image to v0.29.0 and drop removed config keys
新版 headscale 移除了部分設定鍵,搭配 watchtower 自動更新 :latest
導致容器啟動即 FATAL、無限重啟,所有節點離線。

- config.yaml: 註解 randomize_client_port(FATAL)與 ephemeral_node_inactivity_timeout(已改名)
- docker-compose.yml: image 釘到 v0.29.0,停止破壞性自動升級
- OPERATIONS.md / CLAUDE.md: 補上故障排除與升級注意事項

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-18 18:10:31 +08:00
7d9e1453ee Optimize docker-compose.yml configuration
- Remove version declaration to avoid warnings
- Add healthcheck for service monitoring
- Set timezone to Asia/Taipei
- Configure logging with size limits
- Use read-only mount for config files
- Add service description label
- Remove redundant 'command: serve'
- Improve configuration structure and organization

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
2026-03-24 10:28:30 +08:00
c3f7ef2c75 Restructure documentation files for better organization
- Remove old README file
- Add QUICKSTART.md for quick setup (3-step process)
- Add SUMMARY.md for project overview and architecture
- Add OPERATIONS.md for detailed management procedures
- Keep README.md as comprehensive main documentation
- Organize content by purpose: quick start, overview, operations

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
2026-03-24 10:26:22 +08:00
c3f7daa99e Improve CLAUDE.md with enhanced operational guidance
- Add comprehensive command reference with quick scripts
- Include node onboarding workflow and health monitoring
- Update operational patterns with security and data management
- Add critical setup requirements and constraints
- Incorporate important information from README.md
- Focus on practical operational aspects rather than generic practices

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
2026-03-24 10:23:49 +08:00
d69c7f5dce Create comprehensive README.md documentation
- Organize scattered README content into structured markdown
- Add project overview and server information
- Include quick start guide with Docker setup
- Document device connection workflow
- Provide node management operations
- Add user and key management sections
- Include network testing and daily commands
- Add troubleshooting guide and port information
- Organize content with proper headings and sections

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
2026-03-24 10:17:13 +08:00
16f97aed28 Update config/config.yaml with Chinese comments and network settings
- Add comprehensive Chinese comments for all configuration sections
- Change server_url to https://headscale.lotimmy.com for production use
- Update listen addresses to bind to 0.0.0.0 for external access
- Configure custom DNS servers including NextDNS, Cloudflare, and Google
- Enable override_local_dns to force Headscale DNS management
- Set randomize_client_port to true for firewall compatibility
- Update base_domain to internal.lotimmy.com

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
2026-03-24 10:11:07 +08:00
1410ba6630 Initial commit: Headscale management scripts and configuration
- Add headscale binary and configuration files
- Include management scripts for API keys, nodes, and authentication
- Add Docker setup with docker-compose
- Include backup and restore functionality
- Add example scripts for creating API keys and pre-auth keys

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
2026-03-24 10:08:28 +08:00