Timmy
16f97aed28
- Add comprehensive Chinese comments for all configuration sections - Change server_url to https://headscale.lotimmy.com for production use - Update listen addresses to bind to 0.0.0.0 for external access - Configure custom DNS servers including NextDNS, Cloudflare, and Google - Enable override_local_dns to force Headscale DNS management - Set randomize_client_port to true for firewall compatibility - Update base_domain to internal.lotimmy.com Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
https://headscale.lotimmy.com docker network create shared-net # Create a pre-auth key headscale preauthkeys create --user 1 --reusable --ephemeral=false --expiration 24h # Create a pre-auth key with long expiration headscale preauthkeys create --user 1 --reusable --ephemeral=false --expiration 87600h headscale preauthkeys create \ --user 1 \ # 給 ID 是 1 的人用（記得先用 list 查 ID） --reusable \ # 拿到這組 key，你想裝幾台機器都可以，不用換 --ephemeral=false \ # 機器離線後名字還是會留著，不會被系統踢掉 --expiration 87600h # 有效期開到最滿（10 年），懶人必備，不用每年重弄 HS_十年金鑰 2026-01-14T03:31:35Z TRC expiration has been set expiration=315360000000 ef127d5251adc78d0250f869d00e5454e40612ba47f4ce80 tailscale up --login-server <你的網址> --auth-key <指令產生的金鑰> tailscale up --login-server https://headscale.lotimmy.com --auth-key ef127d5251adc78d0250f869d00e5454e40612ba47f4ce80 tailscale up --login-server https://headscale.lotimmy.com --auth-key ef127d5251adc78d0250f869d00e5454e40612ba47f4ce80 --accept-routes # Register a node headscale nodes register --user USERNAME --key 2HdYHEaOQ30UUckHXt_dBYZr headscale nodes register --user mainnet --key tzDlexiDOMMIOlJUlkQUADTy headscale nodes register --user mainnet --key WxG-YH2yUTAz4Vf5bJaiJxG4 headscale nodes register --user mainnet --key xi1HU_5AJqJXdKIhLY4E8WiU headscale nodes register --user mainnet --key t1o75XesCYNkVJxUnm-VNIst headscale nodes register --user mainnet --key lvfjwzg2KeISpdJtMtqMNeFN headscale nodes register --user mainnet --key 4L66v9uDIuzJdgeo4dupGLfL headscale nodes register --key 7oLjwdXp0OyIlrRbEZr35Gwv --user mainnet # List routes headscale nodes list-routes # Approve routes headscale nodes approve-routes --identifier 3 --routes 0.0.0.0/0,::/0 headscale nodes approve-routes --identifier 4 --routes 0.0.0.0/0,192.168.42.0/24,::/0 headscale nodes approve-routes --identifier 33 --routes 0.0.0.0/0,192.168.42.0/24,::/0 headscale nodes approve-routes --identifier 5 --routes 192.168.42.0/24 headscale nodes approve-routes --identifier 6 --routes 0.0.0.0/0,192.168.88.0/24,::/0 headscale nodes approve-routes --identifier 19 --routes 0.0.0.0/0,192.168.88.0/24,::/0 # List all nodes headscale nodes list headscale nodes list --output json | jq '.[] | {id, name, tags: .forced_tags}' # Rename nodes headscale nodes rename --identifier 2 iphone-15-pro-max headscale nodes rename --identifier 4 ip-192-168-42-102 headscale nodes rename --identifier 5 apple-tv-bedroom headscale nodes rename --identifier 7 ipad-mini-6 headscale nodes rename --identifier 7 iphone-12 headscale nodes rename --identifier 38 galaxy-tab-a # Delete node 6 headscale nodes delete --identifier 6 headscale nodes delete --identifier 6 --force # List pre-auth keys headscale preauthkeys list --user 1 # List API keys headscale apikeys list # Revoke API key headscale apikeys revoke <KEY_ID> # 為指定節點加上 server 或 mobile 的 tag headscale nodes tag --identifier 4 --tags tag:server # ct102 headscale nodes tag --identifier 9 --tags tag:server # 15-macbook-pro headscale nodes tag --identifier 12 --tags tag:server # ip-192-168-88-82 headscale nodes tag --identifier 13 --tags tag:server # ip-141-11-93-252 headscale nodes tag --identifier 2 --tags tag:mobile # iphone-15-pro-max headscale nodes tag --identifier 5 --tags tag:mobile # apple-tv-bedroom headscale nodes tag --identifier 7 --tags tag:mobile # ipad-mini-6 headscale nodes tag --identifier 8 --tags tag:mobile # oppo-a74-5g headscale nodes tag --identifier 11 --tags tag:mobile # iphone-xr # 移除指定節點（ID 13）的所有 tags headscale nodes tag --identifier 13 --tags "" # 查看所有使用者 headscale users list # 將 ID 1 的使用者（namespace）改名為 mainnet headscale users rename --identifier 1 --new-name mainnet # ping 內部 tailnet 節點（例：100.64.0.4） tailscale ping 100.64.0.4 tailscale up --reset \ --login-server https://headscale.lotimmy.com \ --advertise-exit-node \ --advertise-routes=192.168.42.0/24 \ --accept-routes=false