Commit graph

222 commits

Author SHA1 Message Date
Juan Font Alonso 97f7c90092 Added communication between Serve and CLI using KV table (helps in #52) 2021-07-25 17:59:48 +02:00
Juan Font b83ecc3e6e
Merge pull request #61 from ohdearaugustin/topic/refactor-cli-versionCmd
Refactor cmdVersion to cli package
2021-07-25 12:00:06 +02:00
Juan Font 04fdd94201
Merge pull request #60 from cure/tls-more-readme-changes
Add some more detail to the README about the different Let's Encrypt
2021-07-25 11:38:31 +02:00
ohdearaugustin 48ec51d166 Refactor cmdVersion to cli package 2021-07-25 02:02:05 +02:00
Ward Vandewege 3260362436 Add some more detail to the README about the different Let's Encrypt
validation methods.
2021-07-24 09:20:38 -04:00
Ward Vandewege 5f60671d12
Merge pull request #59 from qbit/tls_letsencrypt_listen
Add a 'tls_letsencrypt_listen' config option
2021-07-24 09:03:04 -04:00
Aaron Bieber 69d77f6e9d Add a 'tls_letsencrypt_listen' config option
Currently the default (and non-configurable) Let's Encrypt listener will
bind to all IPs. This isn't ideal if we want to run headscale on a specific
IP only.

This also allows for one to set the listener to something other than
port 80. This is useful for OSs like OpenBSD which only allow root to
bind the lower port ranges (and don't have `setcap`) as we can now run
`headscale` as a non-privileged user while still using the baked in ACME
magic. Obviously this configuration would also require a reverse proxy
or firewall rule to redirect traffic. I attempted to outline that in the
README change.
2021-07-23 16:12:01 -06:00
Juan Font 1af9c11bdd
Merge pull request #54 from juanfont/delete-nodes
Implement node deletion
2021-07-19 16:18:09 +02:00
Juan Font Alonso 57c115e60a Fix linting error: 2021-07-17 11:17:42 +02:00
Juan Font Alonso 96b4d2f391 Mark the machine as unregistered before soft delete 2021-07-17 11:12:24 +02:00
Juan Font Alonso 0f649aae8b Ask for confirmation before deleting 2021-07-17 11:09:42 +02:00
Juan Font f491db232b
Merge pull request #55 from cure/letsencrypt-more-flexible-config
Turn the combination of TLS-ALPN-01 and listen_addr on a port other than
2021-07-17 11:01:08 +02:00
Ward Vandewege 9a24340bd4 Turn the combination of TLS-ALPN-01 and listen_addr on a port other than
443 into a warning, not an error, refs #53.
2021-07-16 22:02:05 -04:00
Juan Font Alonso 39b756cf55 Fixed linting 2021-07-17 00:29:14 +02:00
Juan Font Alonso 9ca2ae7fc5 Implemented delete nodes (#52) 2021-07-17 00:23:12 +02:00
Juan Font Alonso f3139d26c8 Added methods to delete nodes 2021-07-17 00:14:22 +02:00
Juan Font 6f20a1fc68
Merge pull request #51 from tianon/typo
Fix minor typo
2021-07-16 18:04:46 +02:00
Tianon Gravi 243b961cbe
Fix minor typo
> Error: unknown command "namespace" for "headscale"
2021-07-16 15:07:13 +00:00
Juan Font Alonso 5748744134 Use ubuntu 18.04 as build env 2021-07-12 17:04:28 +02:00
Juan Font 31556e1ac0
Merge pull request #48 from juanfont/better-profile-info
Improving namespace/user support
2021-07-11 16:44:16 +02:00
Juan Font Alonso 0159649d0a Send the namespace name as user to the clients 2021-07-11 16:39:19 +02:00
Juan Font Alonso cf9d920e4a Minor typo 2021-07-11 15:10:37 +02:00
Juan Font Alonso 7d46dfe012 Only load ACLs if a path is present 2021-07-11 15:10:11 +02:00
Juan Font Alonso eabb1ce881 Fix minor typo on the register webpage 2021-07-11 15:05:32 +02:00
Juan Font Alonso db20985b06 Show N/A in reusable when key is ephemeral 2021-07-11 13:14:25 +02:00
Juan Font Alonso 29b80e3ca1 Fix debug mode enabled by default in db 2021-07-11 13:13:36 +02:00
Juan Font Alonso a16a763283 Update README.md with info on ACLs 2021-07-11 13:04:33 +02:00
Juan Font ad7f03c9dd
Merge pull request #47 from juanfont/handle-ephemeral-reconnect
Added HTTP responses on map errors
2021-07-11 11:41:23 +02:00
Juan Font Alonso bff3d2d613 Added HTTP responses on errors 2021-07-11 11:37:17 +02:00
Juan Font f66c283756
Merge pull request #46 from Teteros/update-derp-servers
Update DERP server definitions
2021-07-10 23:29:54 +02:00
Teteros ad454d95b9
Update DERP server definitions 2021-07-10 09:00:35 +01:00
Juan Font e67a98b758
Merge pull request #44 from juanfont/acls
Add support for Policy ACLs
2021-07-07 16:19:45 +02:00
Juan Font Alonso ecf258f995 Use gorm connection pool 2021-07-04 21:56:13 +02:00
Juan Font Alonso d4b27fd54b Merge branch 'main' into acls 2021-07-04 21:54:55 +02:00
Juan Font 90e9ad9a0e
Merge pull request #45 from juanfont/reuse-gorm-connection
Use gorm connection pool
2021-07-04 21:51:43 +02:00
Juan Font Alonso ff9d99b9ea Use gorm connection pool 2021-07-04 21:40:46 +02:00
Juan Font 7590dee1f2 Removed unnecessary prints 2021-07-04 13:47:59 +02:00
Juan Font 315bc6b677 Added acl path key in example config 2021-07-04 13:41:38 +02:00
Juan Font a1b8f77b1b Fixed tests 2021-07-04 13:40:45 +02:00
Juan Font 19443669bf Fixed linting issues 2021-07-04 13:33:00 +02:00
Juan Font d446e8a2fb More stuff in go.sum 2021-07-04 13:24:27 +02:00
Juan Font 202d6b506f Load ACL policy on headscale startup 2021-07-04 13:24:05 +02:00
Juan Font 401e6aec32 And more tests 2021-07-04 13:23:31 +02:00
Juan Font bd86975d10 Added missing go.mod 2021-07-04 13:10:15 +02:00
Juan Font d0e970f21d Added more unit tests 2021-07-04 13:01:41 +02:00
Juan Font 07e95393b3 Rule generation kinda working, missing tests 2021-07-04 12:35:18 +02:00
Juan Font 136aab9dc8 Work in progress in rule generation 2021-07-03 17:31:32 +02:00
Juan Font bbd6a67c46 Added more acl test hujsons 2021-07-03 17:31:08 +02:00
Juan Font 31ea67bcaf
Minor addenda to README.md 2021-07-03 16:10:22 +02:00
Juan Font 5644dadaf9 Added dependency on hujson 2021-07-03 12:02:46 +02:00