Skip to content

Commit

Permalink
Update Posts
Browse files Browse the repository at this point in the history
  • Loading branch information
radarsymphony committed Nov 16, 2023
2 parents 35c7c10 + 834c877 commit b4b2fc4
Show file tree
Hide file tree
Showing 3 changed files with 9 additions and 7 deletions.
2 changes: 1 addition & 1 deletion content/posts/headscale-for-tailscale-vpn.md
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ tags:
# Overview
This guide outlines how to set up [Headscale](https://headscale.net/) running as Docker container behind a reverse proxy (Traefik). It uses a free ubuntu VPS from the Oracle Cloud Free Tier, but any linux-based host with public IP and about ~1GB of memory should work for small Home Lab setups.

Headscale is an opensource reverse-engineered implementation of the closed source Tailscale coordination server. There are many advantages to using the original Tailscale coordination server, such as a feature admin panel and multiple tailnets. However, I am on a quest to explore opensource and privacy-focused software, I've decided to set up Headscale as my Tailscale coordination server.
Headscale is an opensource reverse-engineered implementation of the closed source Tailscale coordination server. There are many advantages to using the original Tailscale coordination server, such as a convenient admin panel and multiple tailnets. However, I am on a quest to explore opensource and privacy-focused software, I've decided to set up Headscale as my Tailscale coordination server.

Setting up Headscale behind a reverse-proxy is not something that the maintainers support or use themselves, but it _is_ a feature that is often [requested by community members](https://github.com/juanfont/headscale/issues/527). I wanted to see if I could identify a way to configure Headscale behind Traefik as a reverse proxy. The following is my working prototype.
#### Prerequisites
Expand Down
4 changes: 2 additions & 2 deletions content/posts/local-dns-with-bind9.md
Original file line number Diff line number Diff line change
Expand Up @@ -32,8 +32,8 @@ services:
image: ubuntu/bind9:9.18-22.04_beta
container_name: ns-local-example-com
ports:
- "53:53/udp"
- "53:53/tcp"
- "127.0.0.1:53:53/udp"
- "127.0.0.1:53:53/tcp"
# https://bind9.readthedocs.io/en/v9.18.19/manpages.html#std-iscman-rndc
- "127.0.0.1:953:953/tcp"
environment:
Expand Down
10 changes: 6 additions & 4 deletions content/posts/traefik-reverse-proxy.md
Original file line number Diff line number Diff line change
Expand Up @@ -94,9 +94,11 @@ providers:
directory: /etc/traefik # mapped in compose.yml
watch: true

logs:
filePath: /var/log/traefik.log # mapped in compose.yml
level: DEBUG
log:
level: "INFO"
filePath: "/var/log/traefik/traefik.log"
accessLog:
filePath: "/var/log/traefik/access.log"

```
## Docker
Expand All @@ -110,7 +112,7 @@ services:
image: traefik:latest
container_name: traefik
security_opt:
- no-new-privileges: true
- no-new-privileges=true
environment:
- TZ=[YOUR_TIMEZONE]
# Lookup environment variables for your provider
Expand Down

0 comments on commit b4b2fc4

Please sign in to comment.