timmy/headscale
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
12 Commits 1 Branch 0 Tags
master
Commit Graph

5 Commits

Author SHA1 Message Date
timmy
a20835c371 fix(compose): exec-form healthcheck; enable embedded DERP (tw) 
- healthcheck 改 exec 形式（distroless 映像無 /bin/sh，CMD-SHELL 永遠 unhealthy）
- 補 command: serve、對外開 3478/udp（DERP STUN）
- config.yaml 內建 DERP 設為 enabled（region tw），與線上實跑一致

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-07-13 21:28:47 +08:00
Timmy
5e48016852 feat: enable Taildrive via ACL policy (full-mesh preserved) 
新增 config/policy.hujson 並啟用 policy.path：
- acls 保留 allow-all，維持原本全互通行為
- nodeAttrs 授予所有節點 drive:share / drive:access
- grants 開放 tailscale.com/cap/drive（所有 share, rw）

已部署至伺服器並驗證：policy valid、14 節點 online、peer ping 正常、
drive 能力出現在 netmap。

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-18 18:33:08 +08:00
Timmy
e404dd9036 fix: pin headscale image to v0.29.0 and drop removed config keys 
新版 headscale 移除了部分設定鍵，搭配 watchtower 自動更新 :latest
導致容器啟動即 FATAL、無限重啟，所有節點離線。

- config.yaml: 註解 randomize_client_port（FATAL）與 ephemeral_node_inactivity_timeout（已改名）
- docker-compose.yml: image 釘到 v0.29.0，停止破壞性自動升級
- OPERATIONS.md / CLAUDE.md: 補上故障排除與升級注意事項

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-18 18:10:31 +08:00
Timmy
16f97aed28 Update config/config.yaml with Chinese comments and network settings 
- Add comprehensive Chinese comments for all configuration sections
- Change server_url to https://headscale.lotimmy.com for production use
- Update listen addresses to bind to 0.0.0.0 for external access
- Configure custom DNS servers including NextDNS, Cloudflare, and Google
- Enable override_local_dns to force Headscale DNS management
- Set randomize_client_port to true for firewall compatibility
- Update base_domain to internal.lotimmy.com

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
 2026-03-24 10:11:07 +08:00
Timmy
1410ba6630 Initial commit: Headscale management scripts and configuration 
- Add headscale binary and configuration files
- Include management scripts for API keys, nodes, and authentication
- Add Docker setup with docker-compose
- Include backup and restore functionality
- Add example scripts for creating API keys and pre-auth keys

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
 2026-03-24 10:08:28 +08:00