a414f03a59
- Configure tailscale serve automatically for each instance on Windows userspace networking. - Add local UI buttons: start/stop/reset/delete instances (stop/start preserve volumes). - Clean shutdown: stop tailscaled and instances, notify server with instance_stopped. - Restart tailscaled on agent boot using persisted state when pre-auth key is absent. - Sync instance stopped/deleted status to dashboard (server/lib/websocket.ts). - Security: include prior authz/scoping changes across API routes, ephemeral pre-auth keys, ACL policy, internal API key. - Update SUIVI_VPN_ONDEMAND.md and docs/ONBOARDING_CLIENT.md. - Bump agent version to 0.3.5.
48 lines
943 B
YAML
48 lines
943 B
YAML
# Headscale configuration for studioE5 client A
|
|
server_url: https://headscale.studioe5.edudeploy.com
|
|
listen_addr: 0.0.0.0:8080
|
|
metrics_listen_addr: 0.0.0.0:9090
|
|
grpc_listen_addr: 127.0.0.1:50443
|
|
|
|
noise:
|
|
private_key_path: /etc/headscale/noise_private.key
|
|
|
|
prefixes:
|
|
v4: 100.64.0.0/10
|
|
v6: fd7a:115c:a1e0::/48
|
|
allocation: sequential
|
|
|
|
dns:
|
|
magic_dns: true
|
|
base_domain: studioe5.local
|
|
nameservers:
|
|
global:
|
|
- 1.1.1.1
|
|
- 8.8.8.8
|
|
override_local_dns: true
|
|
|
|
derp:
|
|
server:
|
|
enabled: true
|
|
region_id: 999
|
|
region_code: headscale
|
|
region_name: Headscale Embedded DERP
|
|
stun_listen_addr: 0.0.0.0:3478
|
|
private_key_path: /etc/headscale/derp_server_private.key
|
|
urls:
|
|
- https://controlplane.tailscale.com/derpmap/default
|
|
paths: []
|
|
|
|
database:
|
|
type: sqlite3
|
|
sqlite:
|
|
path: /etc/headscale/db.sqlite
|
|
|
|
policy:
|
|
path: /etc/headscale/acl_policy.hujson
|
|
mode: file
|
|
|
|
log:
|
|
format: text
|
|
level: info
|