headscale/config.json.sqlite.example

{
    "server_url": "http://127.0.0.1:8080",
    "listen_addr": "0.0.0.0:8080",
    "private_key_path": "private.key",
    "derp_map_path": "derp.yaml",
    "ephemeral_node_inactivity_timeout": "30m",
    "db_type": "sqlite3",
    "db_path": "db.sqlite",
    "tls_letsencrypt_hostname": "",
    "tls_letsencrypt_listen": ":http",
    "tls_letsencrypt_cache_dir": ".cache",
    "tls_letsencrypt_challenge_type": "HTTP-01",
    "tls_cert_path": "",
    "tls_key_path": "",
    "acl_policy_path": "",
    "dns_config": {
        "nameservers": [
            "1.1.1.1"
        ]
    }
}
Initial commit 2020-06-21 18:32:08 +08:00			`{`
Use 8080 as default port, like in the Kubernetes yamls 2021-07-30 23:07:19 +08:00			`"server_url": "http://127.0.0.1:8080",`
			`"listen_addr": "0.0.0.0:8080",`
Initial commit 2020-06-21 18:32:08 +08:00			`"private_key_path": "private.key",`
If the configuration file contains relative paths (e.g. in the values for private_key_path or derp_map_path), interpret them as relative to the directory where the config.json file was read from. 2021-04-23 09:10:50 +08:00			`"derp_map_path": "derp.yaml",`
Add support for ephemeral nodes via a special type of pre-auth key. Add tests for that feature. Other fixes: clean up a few typos in comments. Fix a bug that caused the tests to run four times each. Be more consistent in the use of log rather than fmt to print errors and notices. 2021-05-23 08:15:29 +08:00			`"ephemeral_node_inactivity_timeout": "30m",`
Added tests for the sqlite-based config 2021-05-15 20:36:13 +08:00			`"db_type": "sqlite3",`
Check for abs/rel path in db_path 2021-05-19 07:28:47 +08:00			`"db_path": "db.sqlite",`
Add support for automatic TLS certificates via Let's Encrypt. Add a configuration reference to the README.md file. 2021-04-24 10:54:15 +08:00			`"tls_letsencrypt_hostname": "",`
Add a 'tls_letsencrypt_listen' config option Currently the default (and non-configurable) Let's Encrypt listener will bind to all IPs. This isn't ideal if we want to run headscale on a specific IP only. This also allows for one to set the listener to something other than port 80. This is useful for OSs like OpenBSD which only allow root to bind the lower port ranges (and don't have `setcap`) as we can now run `headscale` as a non-privileged user while still using the baked in ACME magic. Obviously this configuration would also require a reverse proxy or firewall rule to redirect traffic. I attempted to outline that in the README change. 2021-07-24 06:12:01 +08:00			`"tls_letsencrypt_listen": ":http",`
Add support for automatic TLS certificates via Let's Encrypt. Add a configuration reference to the README.md file. 2021-04-24 10:54:15 +08:00			`"tls_letsencrypt_cache_dir": ".cache",`
			`"tls_letsencrypt_challenge_type": "HTTP-01",`
Add HTTPS support for the web endpoint with manually configured certificate/key files. 2021-04-24 04:54:35 +08:00			`"tls_cert_path": "",`
Added acl path key in example config 2021-07-04 19:41:38 +08:00			`"tls_key_path": "",`
Add DNSConfig to example and setup test 2021-08-24 14:10:09 +08:00			`"acl_policy_path": "",`
			`"dns_config": {`
			`"nameservers": [`
			`"1.1.1.1"`
			`]`
			`}`
If the configuration file contains relative paths (e.g. in the values for private_key_path or derp_map_path), interpret them as relative to the directory where the config.json file was read from. 2021-04-23 09:10:50 +08:00			`}`