Headscale部署

下载Headscale-ui

1
2
3
4
5
wget https://github.com/gurucomputing/headscale-ui/releases/download/2024.02.24-beta1/headscale-ui.zip -O /tmp/headscale.zip
cd /tmp
unzip ./headscale.zip
mkdir /usr/local/www/
mv ./web /usr/local/www/headscale-ui

配置Headscale

  • 修改server_url

  • 修改listen_addr

其他按需修改

配置API:

1
headscale api create

配置Nginx

nano /etc/nginx/conf.d/headscale.conf

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
server {
server_name hs.020124.xyz;

# Security / XSS Mitigation Headers
add_header X-Frame-Options "SAMEORIGIN";
add_header X-XSS-Protection "1; mode=block";
add_header X-Content-Type-Options "nosniff";

location /web {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
alias /usr/local/www/headscale-ui;
index index.html;
}

location / {
proxy_pass http://127.0.0.1:10080;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $host;
proxy_redirect http:// https://;
proxy_buffering off;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $http_x_forwarded_proto;
add_header Strict-Transport-Security "max-age=15552000; includeSubDomains" always;
}
}

进入https://hs.020124.xyz/web后填入api key

客户端

1
tailscale up --login-server https://hs.020124.xyz/