4f1f235a2e
feat: add strip_email_domain to normalization of namespace
2022-02-23 14:03:07 +01:00
717250adb3
feat: removing matchmap from headscale
2022-02-22 20:58:08 +01:00
9ceac5c0fc
Remove CLI and tests for Shared node
2022-02-21 22:44:08 +00:00
fbc1843889
metrics/tests: update tests
2022-02-21 12:51:05 -03:00
45d5ab30ff
metrics/cfg: add a new entry for the Prometheus listen address
2022-02-21 12:50:44 -03:00
daa75da277
Linting and updating tests
2022-02-21 10:09:23 -05:00
7bf2a91dd0
Merge branch 'main' into configurable-mtls
2022-02-20 14:33:23 +00:00
385dd9cc34
refactoring
2022-02-20 09:06:14 -05:00
4e54796384
Allow gRPC server to run insecure
2022-02-13 09:08:46 +00:00
c3b68adfed
Fix lint
2022-02-13 08:46:35 +00:00
0018a78d5a
Add insecure option
...
Add option to not _validate_ if the certificate served from headscale is
trusted.
2022-02-13 08:41:49 +00:00
ead8b68a03
Fix lint
2022-02-12 19:42:55 +00:00
315ff9daf0
Remove insecure, only allow valid certs
2022-02-12 19:35:55 +00:00
e18078d7f8
Rename j
2022-02-12 19:08:41 +00:00
c73b57e7dc
Use undeprecated method for insecure
2022-02-12 19:08:33 +00:00
811d3d510c
Add grpc_listen_addr config option
2022-02-12 16:14:33 +00:00
168b1bd579
Merge branch 'main' into configurable-mtls
2022-01-31 12:28:00 +00:00
9de5c7f8b8
updating default
2022-01-31 07:22:17 -05:00
6f6018bad5
Merge branch 'main' into ipv6
2022-01-30 08:21:11 +00:00
0609c97459
Merge branch 'main' into configurable-mtls
2022-01-29 20:15:58 +00:00
cd0df1e46f
Merge branch 'main' into socket-permission
2022-01-29 19:30:49 +00:00
c98a559b4d
linting/formatting
2022-01-29 14:15:33 -05:00
5935b13b67
refining
2022-01-29 13:35:08 -05:00
9e619fc020
Making client authentication mode configurable
2022-01-29 12:59:31 -05:00
45bcf39894
fixup! fixup! cmd/headscale/cli/utils: merge ip_prefix with ip_prefixes in config
2022-01-29 16:52:27 +01:00
0a1db89d33
fixup! cmd/headscale/cli/utils: merge ip_prefix with ip_prefixes in config
2022-01-29 16:27:36 +01:00
e66f8b0eeb
cmd/headscale/cli/utils: merge ip_prefix with ip_prefixes in config
2022-01-29 16:04:15 +01:00
b4f8961e44
Make Unix socket permissions configurable
2022-01-28 18:58:22 +00:00
126e694f26
Add generate private-key command
...
This commit adds a command to generate a private key for headscale.
Mostly useful for systems were you drive the deployment from another
machine and use a secret management system.
2022-01-28 18:08:52 +00:00
05db1b7109
Formatting and improving logs for config loading
2022-01-25 22:11:15 +00:00
6e14fdf0d3
More reusable stuff in cli
2022-01-25 22:11:15 +00:00
1fd57a3375
Add apikeys command to create, list and expire
2022-01-25 22:11:15 +00:00
b4259fcd79
Add helper function for colouring expiries
2022-01-25 22:11:15 +00:00
1a6e5d8770
Add support for multiple IP prefixes
2022-01-16 14:18:22 +01:00
25b5eb8d7f
Update tests to aline with new config example
2022-01-02 23:17:42 +00:00
8932133ae7
Merge branch 'main' into kradalby-patch-2
2021-11-28 09:28:32 +00:00
34f4109fbd
Add back privatekey, but automatically generate it if it does not exist
2021-11-28 09:17:18 +00:00
ef81845deb
Merge branch 'main' into kradalby-patch-2
2021-11-27 20:30:27 +00:00
59aeaa8476
Ensure we always have the key prefix when needed
2021-11-27 20:25:12 +00:00
cb2ea300ad
Fix linter errors.
2021-11-27 13:59:39 -05:00
c38f00fab8
Unmarshal keys in the non-deprecated way
2021-11-26 23:50:42 +00:00
cfd53bc4aa
Factor wgkey to types/key
...
This commit converts all the uses of wgkey to the new key interfaces.
It now has specific machine, node and discovery keys and we now should
use them correctly.
Please note the new logic which strips a key prefix (in utils.go) that
is now standard inside tailscale.
In theory we could put it in the database, but to preserve backwards
compatibility and not spend a lot of resources on accounting for both,
we just strip them.
2021-11-26 23:30:42 +00:00
07418140a2
Remove config loading of private key path
2021-11-26 23:29:41 +00:00
b6ae60cc44
The `create-node` subcommand under `debug` needs a 64 character key.
2021-11-26 14:49:51 -05:00
c7f3e0632b
When creating a preauthkey, the default expiration was passed through as
...
a nil value, instead of the default value (1h). This resulted in the
preauthkey being created with expiration key '0001-01-01 00:00:00',
which meant the key would not work, because it was already expired.
This commit applies the default expiration time (1h) when a preauthkey
is created without a specific expiration. It also updates an integration
test to make sure this bug does not reoccur.
2021-11-26 10:04:26 -05:00
e8faff4fe2
Use uint64 straight instead of converting
2021-11-22 17:22:22 +00:00
fac33e46e1
Add long description for expire
2021-11-21 21:35:36 +00:00
b152e53b13
Use correct type for nodes command
2021-11-21 21:34:03 +00:00
a2b9f3bede
Add expire (logout) machine command
2021-11-21 13:40:44 +00:00
f85a77edb5
Remove println statement
2021-11-21 09:48:59 +00:00
1c7aff5dd9
Add expired column to machine list command
2021-11-21 09:44:38 +00:00
6a9dd2029e
Remove expiry logic, this needs to be redone
2021-11-19 09:02:49 +00:00
d6739386a0
Get rid of dynamic errors
2021-11-15 19:18:14 +00:00
db8be91d8b
Add and fix forbidigo
2021-11-15 18:36:02 +00:00
c4d4c9c4e4
Add and fix gosec
2021-11-15 18:31:52 +00:00
715542ac1c
Add and fix stylecheck (golint replacement)
2021-11-15 17:24:24 +00:00
0c45f8d252
Add and fix errorlint
2021-11-15 16:26:41 +00:00
471c0b4993
Initial work eliminating one/two letter variables
2021-11-14 20:32:03 +01:00
85f28a3f4a
Remove all instances of undefined numbers (gonmd)
2021-11-14 18:31:51 +01:00
796072a5a4
Add and fix ifshort
2021-11-14 18:09:22 +01:00
c9c16c7fb8
Remove unused params or returns
2021-11-14 18:03:21 +01:00
19cd7a4eac
Add and fix exhaustive
2021-11-14 17:52:55 +01:00
89eb13c6cb
Add and fix nlreturn (new line return)
2021-11-14 16:46:09 +01:00
052883aa55
Fix merge conflict
2021-11-14 08:30:48 +00:00
acf7e462ad
Improvements for namespace deletion: add a confirmation prompt, and make
...
sure to also delete any associated preauthkeys.
2021-11-13 14:01:05 -05:00
2634215f12
golangci-lint --fix
2021-11-13 08:39:04 +00:00
03b7ec62ca
Go format with shorter lines
2021-11-13 08:36:45 +00:00
0803c407a9
Fix Reusable typo, add tests for Augustines scenario
2021-11-08 20:49:03 +00:00
dce6b8d72e
Add test case and fix nil pointer in preauthkeys command without expiration
2021-11-08 08:02:01 +00:00
d47b83f80b
Unwrap grpc errors to make nicer user facing errors
2021-11-07 10:15:32 +00:00
b11acad1c9
Fix typo
2021-11-07 09:57:39 +00:00
2dfd42f80c
Attempt to dry up CLI client, add proepr config
...
This commit is trying to DRY up the initiation of the gRPC client in
each command:
It renames the function to CLI instead of GRPC as it actually set up a
CLI client, not a generic grpc client
It also moves the configuration of address, timeout (which is now
consistent) and api to use Viper, allowing users to set it via env vars
and configuration file
2021-11-07 09:41:14 +00:00
ce3f79a3bf
Add yaml to output help
2021-11-07 08:58:45 +00:00
a249d3fe39
Fix color for current namespace in nodes command
2021-11-07 08:58:03 +00:00
8df41b069f
Formatting
2021-11-04 22:45:08 +00:00
be4256b1d0
Convert routes command to use gRPC
2021-11-04 22:44:59 +00:00
77a973878c
Convert preauthkeys command to use gRPC
2021-11-04 22:44:49 +00:00
7b0d2dfb4a
Convert nodes command to use gRPC
2021-11-04 22:44:35 +00:00
79871d2463
Make namespace command use gRPC
...
This commit is a first in a series of commits migrating the command
interfaces to use the new gRPC client.
As a part of this commit, they have been streamlined and each command
_should_ be a bit more similar and use consistent output.
By using the new output function, we now make sure its always json
(errors and everything) if the user asks for JSON.
2021-11-04 22:42:21 +00:00
dce82f4323
Use new json wrapper for version command
2021-11-04 22:41:55 +00:00
9e9049307e
Simplify loglevel parser, turn off logs when machine output is set
2021-11-04 22:32:13 +00:00
cd34a5d6f3
Expand json output to support yaml, make more generic
2021-11-04 22:31:47 +00:00
4226da3d6b
Add "debug" command
...
This commit adds a debug command tree, intended to host commands used
for debugging and testing.
It adds a create node/machine command which will be used later to create
machines that can be used to test the registration command.
2021-11-04 22:08:45 +00:00
12f2a7cee0
Move context per cure's suggestion
2021-10-31 16:26:51 +00:00
264e5964f6
Resolve merge conflict
2021-10-31 09:40:43 +00:00
cbf3f5d640
Resolve merge conflict
2021-10-30 15:33:01 +00:00
018e42acad
Merge branch 'main' into initial-api-cli-work
2021-10-30 15:31:34 +01:00
434fac52b7
Fix lint error
2021-10-30 14:29:03 +00:00
6aacada852
Switch from gRPC localhost to socket
...
This commit changes the way CLI and grpc-gateway communicates with the
gRPC backend to socket, instead of localhost. Unauthenticated access now
goes on the socket, while the network interface will require API key (in
the future).
2021-10-30 14:08:16 +00:00
72fd2a2780
Fix lint error
2021-10-29 17:36:11 +00:00
9ef031f0f8
Port create, delete and list of namespace to grpc
2021-10-29 17:16:54 +00:00
81b8610dff
Add helper function to setup grpc client for cli
2021-10-29 17:15:52 +00:00
eefd82a574
Move config loading out of the headscale app setup
2021-10-29 17:09:06 +00:00
002b5c1dad
Add grpc token auth struct
2021-10-29 17:08:21 +00:00
2d252da221
suggested documentation and comments
2021-10-29 21:35:07 +08:00
f9187bdfc4
Switch to named arguments for all `nodes` subcommands. Update docs
...
accordingly. Fix integration test failure.
2021-10-28 09:31:15 -04:00
b00a2729e3
Update cmd/headscale/cli/nodes.go
...
Co-authored-by: Kristoffer Dalby <kradalby@kradalby.no>
2021-10-28 08:39:42 -04:00
6c01b86e4c
Update cmd/headscale/cli/nodes.go
...
Co-authored-by: Kristoffer Dalby <kradalby@kradalby.no>
2021-10-28 08:39:27 -04:00
d086cf4691
Move the namespace argument back to a flag for the share and unshare
...
commands.
2021-10-27 17:51:42 -04:00
f9ece0087d
Make the cli help a little more explicit for the nodes subcommand.
2021-10-26 08:50:25 -04:00
dd7557850e
cli changes for the `nodes` subcommand:
...
* when listing nodes, a namespace is now optional, when it is not
provided, all nodes are shown
* when deleting, and sharing a node, remove the `namespace` flag, it was
superfluous and unused
* when unsharing a node, specify the namespace as an argument not a
flag, making the UX the same as for sharing.
Also refactor the share/unshare code to reuse the shared bits.
2021-10-24 17:50:28 -04:00
7da3d4ba50
Resolve merge conflict
2021-10-24 21:21:01 +01:00
b85adbc40a
Remove the need for multiple config files
...
This commit removes the almost a 100% redundant tests (two fields were
checked differently) and makes a single example configuration for users.
2021-10-22 18:14:29 +01:00
57f46ded83
Split derp into its own config struct
2021-10-22 16:55:14 +00:00
2c5701917d
Merge branch 'main' into doc-reorg-v1
2021-10-21 18:46:29 +01:00
6b0f5da113
Separate config examples for sqlite and postgres for the time being
2021-10-20 23:27:59 +02:00
41c5a0ddf5
Apply suggestions from code review
...
Co-authored-by: Kristoffer Dalby <kradalby@kradalby.no>
2021-10-20 09:35:56 +02:00
18b00b5d8d
Add support for Split DNS (implements #179 )
2021-10-19 20:51:43 +02:00
da14750396
Merge branch 'main' into main
2021-10-19 15:26:18 +01:00
677bd9b657
Implement namespace matching
2021-10-18 19:27:52 +00:00
9e3339b4f1
Add cli support for unsharing a node from a namespace.
2021-10-17 16:29:46 -04:00
710616f118
Merge branch 'main' into main
2021-10-17 13:26:37 +01:00
7dcf4a5147
Add support for renaming namespaces.
2021-10-16 11:20:06 -04:00
d0cd5af419
fix incorrect merge
2021-10-16 22:34:11 +08:00
afbfc1d370
Merge branch 'main' into main
2021-10-16 22:31:37 +08:00
be3a379d10
Added --force flag on node delete ( fixes #164 )
2021-10-16 12:30:52 +02:00
654d2b9910
Merge branch 'main' into complete-expire-command
2021-10-16 09:41:14 +02:00
0d13e16fed
Improve help message to expire key ( fixes #161 )
2021-10-14 23:58:15 +02:00
91d135e069
Show JSON when error on expire key ( fixes #162 )
2021-10-14 23:54:07 +02:00
cc3e8705bd
Merge branch 'main' into better-pak-management
2021-10-13 23:04:00 +02:00
06ae2a6c50
Merge branch 'main' into better-pak-management
2021-10-13 23:00:38 +02:00
93517aa6f8
Apply suggestions from code review
...
Renamed AlreadyUsed to Used
Co-authored-by: Kristoffer Dalby <kradalby@kradalby.no>
2021-10-13 22:51:55 +02:00
5f0f3705c0
Merge branch 'main' into disable-version-check-on-json
2021-10-13 22:44:18 +02:00
30788e1a70
Add AlreadyUsed field to Auth Keys ( fixes #157 and #158 )
2021-10-13 18:13:26 +02:00
27947c6746
This commit disables the version checker when JSON output ( #153 )
2021-10-13 00:18:55 +02:00
6924b7bf4c
Output json when deleting node ( fixes #152 )
2021-10-12 23:48:08 +02:00
74e6c1479e
updates from code review
2021-10-10 17:22:42 +08:00
2997f4d251
Merge branch 'main' into main
2021-10-08 22:21:41 +01:00
e407d423d4
updates from code review
2021-10-08 17:43:52 +08:00
c487591437
use go-oidc instead of verifying and extracting tokens ourselves, rename oidc_endpoint to oidc_issuer to be more inline with spec
2021-10-06 17:19:15 +08:00
da4a9dadd5
Warn users when MagicDNS is set with no DNS servers
2021-10-04 22:16:53 +02:00
040a18e6f8
Merge branch 'main' into magic-dns-support
2021-10-04 19:45:12 +02:00
ec911981c2
Do not allow magicdns if not nameservers set up
2021-10-04 19:43:58 +02:00
817cc1e567
these are not files!
2021-10-03 14:02:44 -06:00
8fa0fe65ba
Add the ability to specify registration ACME email and ACME URL.
2021-10-03 12:26:38 -06:00
990ff153c0
Merge branch 'main' into magic-dns-support
2021-10-02 15:16:51 +02:00
19492650d4
Fixed error on assign
2021-10-02 13:03:08 +02:00
656237e167
Propagate dns config vales across Headscale
2021-10-02 11:20:42 +02:00
5dbf6b5127
Extended DNS config unit tests
2021-10-02 11:14:18 +02:00
0393ab524c
Merge branch 'main' into main
2021-09-28 11:20:31 +01:00
3f3cfedffa
Add support for MagicDNS
2021-09-28 00:22:29 +02:00
a6adcdafa9
Added switch to disable the update checks
2021-09-27 17:24:34 +02:00
7c37086dd6
Handle lack of internet
2021-09-27 17:12:31 +02:00
2048e9e136
Added version checker on startup
2021-09-27 16:26:18 +02:00
e7a2501fe8
initial work on OIDC (SSO) integration
2021-09-26 16:53:05 +08:00
5840f88251
Update tailscale dependencies to v1.14
2021-09-14 23:46:16 +02:00
203e6bc6b2
Remove trace lines about NO_COLOR.
2021-09-12 07:30:35 -06:00
c4e6ad1ec7
Fixed some typos
2021-09-10 00:52:08 +02:00
263a3f1983
Merge branch 'main' into shared-nodes
2021-09-10 00:49:50 +02:00
bd6adfaec6
Changes a few more variables
2021-09-10 00:37:01 +02:00
55f3e07bd4
Apply suggestions from code review
...
Removed one letter variables
Co-authored-by: Kristoffer Dalby <kradalby@kradalby.no>
2021-09-10 00:26:46 +02:00
729cd54401
Renamed sharing function
2021-09-06 14:39:52 +02:00
7edd0cd14c
Added add node cli
2021-09-03 10:23:45 +02:00
d86de68b40
Show namespace in node list table
2021-09-02 17:06:47 +02:00
e4ef65be76
fix: check last seen time without possible null pointer
2021-09-02 05:44:42 +08:00
8735e5675c
Add a test for the getdnsconfig function
2021-08-25 19:03:04 +01:00
3f5e06a0f8
Dont add the portnumber to the ip
2021-08-25 18:43:13 +01:00
b3732e7fb9
Add nameserver as resolver aswell
2021-08-25 07:04:48 +01:00
e77c16b55a
Add DNSConfig to example and setup test
2021-08-24 07:10:09 +01:00
987bbee1db
Add DNSConfig field to configuration
2021-08-24 07:09:47 +01:00
74d2fe1baa
Merge pull request #84 from kradalby/integration-tests-ci
...
Improve logic to keep nodes up to date with the network state
2021-08-23 09:42:07 +02:00
4f97e077db
Add --all flag to routes enable command to enable all advertised routes
2021-08-21 15:04:30 +01:00
c883e79884
Enhance route command with ptables and multiple routes
...
This commit rewrites the `routes list` command to use ptables to present
a slightly nicer list, including a new field if the route is enabled or
not (which is quite useful).
In addition, it reworks the enable command to support enabling multiple
routes (not only one route as per removed TODO). This allows users to
actually take advantage of exit-nodes and subnet relays.
2021-08-21 14:49:46 +01:00
d93a7f2e02
Make Info default log level
2021-08-20 17:15:07 +01:00
bc2574680d
Linting
2021-08-15 23:35:03 +02:00
f194b41435
Better table in preauthkeys
2021-08-15 23:29:55 +02:00
350f7da55d
Better table in namespaces
2021-08-15 23:20:38 +02:00
55fe5b0b41
Use pterm table in node list
2021-08-15 23:10:39 +02:00
4c849539fc
Expire the ephemeral nodes in the Serve method
2021-08-12 21:44:12 +02:00
c9e5048015
Merge remote-tracking branch 'upstream/main' into integration-tests
2021-08-08 17:57:28 +01:00
91ffd10192
Remove "Keys: " from create auth key output
...
This is based on the premis that "the user know what command they
executed" and therefor know that the output is the key.
This makes the command a lot more useful in scripts.
2021-08-08 17:37:23 +01:00
05e08e0ac7
Added cmd to expire preauth keys (requested in #78 )
2021-08-08 00:10:30 +02:00
73a00c89ff
Try to detect color support, make color configurable
...
This commit tries to detect if users can render colors in their terminal
and only enables color logs if that is true.
It also adds no-color.org's NO_COLOR env var support to allow it to be
disabled.
2021-08-06 07:29:57 +01:00
8a614dabc0
Headscale is from no-juan
2021-08-06 00:23:07 +02:00
a8c8a358d0
Make log keys lowercase
2021-08-05 20:57:47 +01:00
cd2ca137c0
Make log_level user configurable
2021-08-05 19:19:25 +01:00
0660867a16
Correct url
2021-08-05 18:58:15 +01:00
b1200140b8
Convert cli/utils.go
2021-08-05 18:26:49 +01:00
309f868a21
Make IP prefix configurable
...
This commit makes the IP prefix used to generate addresses configurable
to users. This can be useful if you would like to use a smaller range or
if your current setup is overlapping with the current range.
The current range is left as a default
2021-08-02 20:06:26 +01:00
6c903d4a2f
Fixed missing nodes cmd
2021-07-31 23:14:24 +02:00
4fb55e1684
Use 8080 as default port, like in the Kubernetes yamls
2021-07-30 17:07:19 +02:00
91bfb481c1
Fix identation
2021-07-30 16:42:26 +02:00
ea3043cdcb
cmd: Add error check for Persistent Flags
2021-07-25 16:26:15 +02:00
04dffcc4ae
Refactor cli commands
2021-07-25 15:14:09 +02:00
3a07360b6e
Add root cmd
2021-07-25 15:10:34 +02:00
b97d6f71b1
Refactor version cmd
2021-07-25 15:09:53 +02:00
4915902e04
Refactor server cmd
2021-07-25 15:09:33 +02:00
d87a4c87cc
Refactor routes cmd
2021-07-25 15:08:40 +02:00
e56755fd67
Refactor preauthkeys cmd
2021-07-25 15:07:27 +02:00
2862c2034b
Refactor nodes cmd
2021-07-25 15:04:06 +02:00
53185eaa9e
Refactor namespaces cmd
2021-07-25 15:03:45 +02:00
48ec51d166
Refactor cmdVersion to cli package
2021-07-25 02:02:05 +02:00
69d77f6e9d
Add a 'tls_letsencrypt_listen' config option
...
Currently the default (and non-configurable) Let's Encrypt listener will
bind to all IPs. This isn't ideal if we want to run headscale on a specific
IP only.
This also allows for one to set the listener to something other than
port 80. This is useful for OSs like OpenBSD which only allow root to
bind the lower port ranges (and don't have `setcap`) as we can now run
`headscale` as a non-privileged user while still using the baked in ACME
magic. Obviously this configuration would also require a reverse proxy
or firewall rule to redirect traffic. I attempted to outline that in the
README change.
2021-07-23 16:12:01 -06:00
1af9c11bdd
Merge pull request #54 from juanfont/delete-nodes
...
Implement node deletion
2021-07-19 16:18:09 +02:00
57c115e60a
Fix linting error:
2021-07-17 11:17:42 +02:00
0f649aae8b
Ask for confirmation before deleting
2021-07-17 11:09:42 +02:00
9a24340bd4
Turn the combination of TLS-ALPN-01 and listen_addr on a port other than
...
443 into a warning, not an error, refs #53 .
2021-07-16 22:02:05 -04:00
9ca2ae7fc5
Implemented delete nodes ( #52 )
2021-07-17 00:23:12 +02:00
7d46dfe012
Only load ACLs if a path is present
2021-07-11 15:10:11 +02:00
db20985b06
Show N/A in reusable when key is ephemeral
2021-07-11 13:14:25 +02:00
Adrien Raffin-Caboisse
Kristoffer Dalby
Nico Rey
Justin Angel
Csaba Sarkadi
Ward Vandewege
Raal Goff
Ward Vandewege
Juan Font Alonso
unreality
Aaron Bieber
Silver Bullet
ohdearaugustin