MyFavMirrors/headscale
1
0
Fork 0
mirror of https://github.com/juanfont/headscale.git synced 2025-03-31 17:53:47 -04:00
Code Issues Packages Projects Releases Wiki Activity

Mention that private keys generated if needed

Browse Source
This commit is contained in:
Florian Preinstorfer 2025-03-18 20:46:48 +01:00 committed by nblock
parent 24ad235917
commit 707438f25e
1 changed files with 5 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
config-example.yaml
View File

@ -41,9 +41,9 @@ grpc_allow_insecure: false
# The Noise section includes specific configuration for the # The Noise section includes specific configuration for the
# TS2021 Noise protocol # TS2021 Noise protocol
noise: noise:
# The Noise private key is used to encrypt the # The Noise private key is used to encrypt the traffic between headscale and
# traffic between headscale and Tailscale clients when # Tailscale clients when using the new Noise-based protocol. A missing key
# using the new Noise-based protocol. # will be automatically generated.
private_key_path: /var/lib/headscale/noise_private.key private_key_path: /var/lib/headscale/noise_private.key
# List of IP prefixes to allocate tailaddresses from. # List of IP prefixes to allocate tailaddresses from.
@ -91,10 +91,8 @@ derp:
# For more details on how this works, check this great article: https://tailscale.com/blog/how-tailscale-works/ # For more details on how this works, check this great article: https://tailscale.com/blog/how-tailscale-works/
stun_listen_addr: "0.0.0.0:3478" stun_listen_addr: "0.0.0.0:3478"
# Private key used to encrypt the traffic between headscale DERP # Private key used to encrypt the traffic between headscale DERP and
# and Tailscale clients. # Tailscale clients. A missing key will be automatically generated.
# The private key file will be autogenerated if it's missing.
#
private_key_path: /var/lib/headscale/derp_server_private.key private_key_path: /var/lib/headscale/derp_server_private.key
# This flag can be used, so the DERP map entry for the embedded DERP server is not written automatically, # This flag can be used, so the DERP map entry for the embedded DERP server is not written automatically,