headscale/config-example.yaml

76 lines
1.6 KiB
YAML
Raw Normal View History

2021-10-19 16:17:08 -06:00
---
2021-10-22 11:27:11 -06:00
# The url clients will connect to.
# Typically this will be a domain.
2021-10-19 16:17:08 -06:00
server_url: http://127.0.0.1:8080
2021-10-22 11:27:11 -06:00
# Address to listen to / bind to on the server
2021-10-19 16:17:08 -06:00
listen_addr: 0.0.0.0:8080
2021-10-22 11:27:11 -06:00
# Path to WireGuard private key file
2021-10-19 16:17:08 -06:00
private_key_path: private.key
2021-10-22 11:27:11 -06:00
2021-10-24 14:30:51 -06:00
derp:
# List of externally available DERP maps encoded in JSON
urls:
- https://controlplane.tailscale.com/derpmap/default
# Locally available DERP map files encoded in YAML
paths:
- derp-example.yaml
# If enabled, a worker will be set up to periodically
# refresh the given sources and update the derpmap
# will be set up.
auto_update_enabled: true
# How often should we check for updates?
update_frequency: 24h
2021-10-22 11:27:11 -06:00
# Disables the automatic check for updates on startup
disable_check_updates: false
2021-10-19 16:17:08 -06:00
ephemeral_node_inactivity_timeout: 30m
2021-10-22 11:27:11 -06:00
# SQLite config
db_type: sqlite3
db_path: db.sqlite
2021-10-19 16:17:08 -06:00
# # Postgres config
# db_type: postgres
# db_host: localhost
# db_port: 5432
# db_name: headscale
# db_user: foo
# db_pass: bar
2021-10-19 16:17:08 -06:00
acme_url: https://acme-v02.api.letsencrypt.org/directory
acme_email: ""
2021-10-22 11:27:11 -06:00
tls_letsencrypt_hostname: ""
2021-10-19 16:17:08 -06:00
tls_letsencrypt_listen: ":http"
tls_letsencrypt_cache_dir: ".cache"
tls_letsencrypt_challenge_type: HTTP-01
2021-10-22 11:27:11 -06:00
tls_cert_path: ""
tls_key_path: ""
2021-10-22 11:27:11 -06:00
# Path to a file containg ACL policies.
acl_policy_path: ""
2021-10-22 11:27:11 -06:00
2021-10-19 16:17:08 -06:00
dns_config:
2021-10-22 11:27:11 -06:00
# Upstream DNS servers
2021-10-19 16:17:08 -06:00
nameservers:
- 1.1.1.1
2021-10-19 16:17:08 -06:00
domains: []
2021-10-22 11:27:11 -06:00
2021-10-19 16:17:08 -06:00
magic_dns: true
base_domain: example.com
2021-10-30 09:33:01 -06:00
# Experimental: OpenID Connect
# oidc:
# issuer: "https://your-oidc.issuer.com/path"
# client_id: "your-oidc-client-id"
# client_secret: "your-oidc-client-secret"
# domain_map:
# ".*": default-namespace