juanfont/headscale
1
1
Fork 0
mirror of https://github.com/juanfont/headscale.git synced 2024-09-20 15:26:35 +08:00
Code Issues Packages Projects Releases Wiki Activity
253 commits 53 branches 130 tags 28 MiB
Commit graph

253 commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Juan Font 4aad3b7933
Improved README.md on ip_prefix 2021-08-03 20:38:23 +02:00
Juan Font 6091373b53
Merge pull request #63 from juanfont/use-kv-for-updates 
Added communication between Serve and CLI using KV table
 2021-08-03 20:30:33 +02:00
Juan Font 3879120967
Merge pull request #72 from kradalby/ip-pool 
Make IP Prefix configurable and available ip deterministic
 2021-08-03 20:27:42 +02:00
Kristoffer Dalby 465669f650
Merge pull request #1 from kradalby/ip-pool-test 
Fix empty ip issue and remove network/broadcast addresses
 2021-08-03 10:12:09 +01:00
Kristoffer Dalby ea615e3a26
Do not issue "network" or "broadcast" addresses (0 or 255) 2021-08-03 10:06:42 +01:00
Kristoffer Dalby d3349aa4d1
Add test to ensure we can deal with empty ips from database 2021-08-03 09:26:28 +01:00
Kristoffer Dalby 73207decfd Check that IP is set before parsing 
Machine is saved to db before it is assigned an ip, so we might have
empty ip fields coming back.
 2021-08-03 07:42:11 +01:00
Kristoffer Dalby eda6e560c3
debug logging 2021-08-02 22:51:50 +01:00
Kristoffer Dalby 95de823b72
Add test to ensure we can read back ips 2021-08-02 22:39:18 +01:00
Kristoffer Dalby 9f85efffd5
Update readme 2021-08-02 22:06:15 +01:00
Kristoffer Dalby b5841c8a8b Rework getAvailableIp 
This commit reworks getAvailableIp with a "simpler" version that will
look for the first available IP address in our IP Prefix.

There is a couple of ideas behind this:

* Make the host IPs reasonably predictable and in within similar
  subnets, which should simplify ACLs for subnets
* The code is not random, but deterministic so we can have tests
* The code is a bit more understandable (no bit shift magic)
 2021-08-02 21:57:45 +01:00
Kristoffer Dalby 309f868a21 Make IP prefix configurable 
This commit makes the IP prefix used to generate addresses configurable
to users. This can be useful if you would like to use a smaller range or
if your current setup is overlapping with the current range.

The current range is left as a default
 2021-08-02 20:06:26 +01:00
Juan Font 6c903d4a2f Fixed missing nodes cmd 2021-07-31 23:14:24 +02:00
Juan Font c3aa9a5d4c
Merge pull request #69 from juanfont/change-default-port 
Use 8080 as default port in the example config
 2021-07-31 11:47:15 +02:00
Juan Font Alonso 4fb55e1684 Use 8080 as default port, like in the Kubernetes yamls 2021-07-30 17:07:19 +02:00
Juan Font Alonso 91bfb481c1 Fix identation 2021-07-30 16:42:26 +02:00
Juan Font 201ba109c3
Merge pull request #62 from ohdearaugustin/topic/refactor-config 
Topic/refactor config
 2021-07-30 16:40:38 +02:00
Juan Font d3f965d493
Merge pull request #66 from juanfont/remove-old-docker 
Remove old docker code
 2021-07-28 13:43:58 +02:00
Juan Font f832d7325b
Merge pull request #67 from kradalby/patch-1 
Fix typo in example
 2021-07-27 19:58:15 +02:00
Kristoffer Dalby b1d1bd32c3
Fix typo in example 
The example command is missing the `s` in `preauthkeys`
 2021-07-27 18:37:43 +01:00
Juan Font Alonso df6d4de6fd Remove old docker code 2021-07-27 17:05:22 +02:00
Juan Font Alonso 461a893ee4 Added log message when sending updates 2021-07-25 20:47:51 +02:00
Juan Font Alonso 97f7c90092 Added communication between Serve and CLI using KV table (helps in #52) 2021-07-25 17:59:48 +02:00
ohdearaugustin ea3043cdcb cmd: Add error check for Persistent Flags 2021-07-25 16:26:15 +02:00
ohdearaugustin 04dffcc4ae Refactor cli commands 2021-07-25 15:14:09 +02:00
ohdearaugustin 3a07360b6e Add root cmd 2021-07-25 15:10:34 +02:00
ohdearaugustin b97d6f71b1 Refactor version cmd 2021-07-25 15:09:53 +02:00
ohdearaugustin 4915902e04 Refactor server cmd 2021-07-25 15:09:33 +02:00
ohdearaugustin d87a4c87cc Refactor routes cmd 2021-07-25 15:08:40 +02:00
ohdearaugustin e56755fd67 Refactor preauthkeys cmd 2021-07-25 15:07:27 +02:00
ohdearaugustin 2862c2034b Refactor nodes cmd 2021-07-25 15:04:06 +02:00
ohdearaugustin 53185eaa9e Refactor namespaces cmd 2021-07-25 15:03:45 +02:00
Juan Font b83ecc3e6e
Merge pull request #61 from ohdearaugustin/topic/refactor-cli-versionCmd 
Refactor cmdVersion to cli package
 2021-07-25 12:00:06 +02:00
Juan Font 04fdd94201
Merge pull request #60 from cure/tls-more-readme-changes 
Add some more detail to the README about the different Let's Encrypt
 2021-07-25 11:38:31 +02:00
ohdearaugustin 48ec51d166 Refactor cmdVersion to cli package 2021-07-25 02:02:05 +02:00
Ward Vandewege 3260362436 Add some more detail to the README about the different Let's Encrypt 
validation methods.
 2021-07-24 09:20:38 -04:00
Ward Vandewege 5f60671d12
Merge pull request #59 from qbit/tls_letsencrypt_listen 
Add a 'tls_letsencrypt_listen' config option
 2021-07-24 09:03:04 -04:00
Aaron Bieber 69d77f6e9d Add a 'tls_letsencrypt_listen' config option 
Currently the default (and non-configurable) Let's Encrypt listener will
bind to all IPs. This isn't ideal if we want to run headscale on a specific
IP only.

This also allows for one to set the listener to something other than
port 80. This is useful for OSs like OpenBSD which only allow root to
bind the lower port ranges (and don't have `setcap`) as we can now run
`headscale` as a non-privileged user while still using the baked in ACME
magic. Obviously this configuration would also require a reverse proxy
or firewall rule to redirect traffic. I attempted to outline that in the
README change.
 2021-07-23 16:12:01 -06:00
Juan Font 1af9c11bdd
Merge pull request #54 from juanfont/delete-nodes 
Implement node deletion
 2021-07-19 16:18:09 +02:00
Juan Font Alonso 57c115e60a Fix linting error: 2021-07-17 11:17:42 +02:00
Juan Font Alonso 96b4d2f391 Mark the machine as unregistered before soft delete 2021-07-17 11:12:24 +02:00
Juan Font Alonso 0f649aae8b Ask for confirmation before deleting 2021-07-17 11:09:42 +02:00
Juan Font f491db232b
Merge pull request #55 from cure/letsencrypt-more-flexible-config 
Turn the combination of TLS-ALPN-01 and listen_addr on a port other than
 2021-07-17 11:01:08 +02:00
Ward Vandewege 9a24340bd4 Turn the combination of TLS-ALPN-01 and listen_addr on a port other than 
443 into a warning, not an error, refs #53.
 2021-07-16 22:02:05 -04:00
Juan Font Alonso 39b756cf55 Fixed linting 2021-07-17 00:29:14 +02:00
Juan Font Alonso 9ca2ae7fc5 Implemented delete nodes (#52) 2021-07-17 00:23:12 +02:00
Juan Font Alonso f3139d26c8 Added methods to delete nodes 2021-07-17 00:14:22 +02:00
Juan Font 6f20a1fc68
Merge pull request #51 from tianon/typo 
Fix minor typo
 2021-07-16 18:04:46 +02:00
Tianon Gravi 243b961cbe
Fix minor typo 
> Error: unknown command "namespace" for "headscale"
 2021-07-16 15:07:13 +00:00
Juan Font Alonso 5748744134 Use ubuntu 18.04 as build env 2021-07-12 17:04:28 +02:00