Headscale Support

[tajkirkpatrick]

Are you able to support headscale servers with the binary that you're using to execute tailscale?

I have a headscale server, behind a caddy reverse proxy that can generate api keys and connect clients from a domain. Although manually modifying the tailscale up command inside of the launch script just takes me to a blank screen within NextUI.

[ben16w]

Hi what did you put in the launch.sh file?

[tajkirkpatrick]

(on mobile, forgive my formatting)

Changes:
tailscale_login()

• hardcoded the tailscale up parameter --login-server with my public domain with and without the port notation
• renamed --authkey parameter to both --authkey and --auth-key found conflicting documentation.

and

tailscale_get_authkey()

• Commented out the rm -rf authkey of authkey to avoid constant repastes.

[ben16w]

Ok thanks any chance you could upload your log file? I don't have a headscale server to test with so I'd be interested to see what error you're getting

[tajkirkpatrick]

https://gist.github.com/tajkirkpatrick/14cb122b4c6e48fd7a4f5e2fdecfa485

Let me know if you have any trouble accessing that or need any additional information.

[ben16w]

Thanks are you using a self signed cert?

[tajkirkpatrick]

I self-host Caddy as my reverse proxy. So from Headscale's perspective it does not maintain or even know about the TLS certs.
Caddy, in front of Headscale, doesn't use self signed certs.

[ben16w]

I guess my question was where does the cert caddy's got come from but I'm guessing you have it set up with letsencrypt or something similar?

[tajkirkpatrick]

Yes it's definitely built in, and with the version of Caddy I'm running Let's Encrypt was the default at the time.

[ben16w]

I've created a version with support for headscale if you fancy testing it. Down from: https://drive.google.com/file/d/1ZeEKffbE1K_S6ZEpf_yG-jn5Gdn6BTEZ/view?usp=drivesdk

You'll have to create a file named loginserver containing only the base URL of your login server (for example, https://headscale.example.com). Then drop the file on the root of your SD card and start the pak.

[tajkirkpatrick]

Okay apologies for the delay in response. I just got around to testing your latest build and all has successful thus far. I have not pulled the logs yet, but on-device after seeing the "Starting Tailscale VPN..." screen on startup, there was a brief black screen, before returning to the configuration screen to "Enable", "Start on boot", and a successful tailscale address and PID.

I followed your instruction of removing my old Tools / Tailscale.pak folder, and placing your new folder there instead. I placed a loginserver file at the root with no extra whitespaces or newlines and no port notation at the end of the url. And it might also be worth note that I used what looks like a newer preauthkey format of hskey-auth-xxxxx-xxxxx also in the authkey file at root no whitespace or newlines. I left the launch file untouched in the newer build of course.

[ben16w]

Brill, glad it's working