No description
Franz Kafka
1c28db5f8e
New module: modules/headscale.nix - Headscale service listening on localhost with Nginx reverse proxy - SQLite database (appropriate for personal use) - Tailscale public DERP relays for NAT traversal fallback - MagicDNS enabled with Mullvad/Quad9 upstream resolvers - Optional OIDC authentication (Google, GitHub, etc.) - Default auth: pre-shared API keys (headscale apikeys create) - Added to backup paths (SQLite DB) - headscale CLI tool added to system packages Configuration: - Domain: vpn.ashisgreat.xyz - OIDC disabled by default (documented how to enable in configuration.nix) To register a device after deploying: sudo headscale apikeys create tailscale up --login-server=https://vpn.ashisgreat.xyz --authkey=<key> DNS record needed: vpn.ashisgreat.xyz → VPS IP |
||
|---|---|---|
| .claude | ||
| docs/superpowers | ||
| modules | ||
| secrets | ||
| .gitignore | ||
| .sops.yaml | ||
| braveapi.py | ||
| CLAUDE.md | ||
| configuration.nix | ||
| flake.lock | ||
| flake.nix | ||
| hardware-configuration.nix | ||
| LICENSE | ||