Integrating Headscale and Headplane with Pangolin

Networking
, ,
21

These are my traefik labels which work. Headplan developer changed it from /admin to /admin/

labels:
  - traefik.enable=true
  # Router Definition 
  - traefik.http.routers.headplane-rtr.rule=Host(`${HS_URL}`) && PathPrefix(`/admin`)
  - traefik.http.routers.headplane-rtr.priority=100 # sets priority over base-domain
  - traefik.http.routers.headplane-rtr.entrypoints=websecure
  - traefik.http.routers.headplane-rtr.tls.certresolver=myresolver
  - traefik.http.services.headplane-svc.loadbalancer.server.port=3000 # headplane port
  # ---- Middleware for redirect ----
  - traefik.http.middlewares.headplane-addslash.redirectregex.regex=^https?://([^/]+)/admin$$
  - traefik.http.middlewares.headplane-addslash.redirectregex.replacement=https://$${1}/admin/
  - traefik.http.middlewares.headplane-addslash.redirectregex.permanent=true
22

does anyone here use pocket-id (oidc) to secure headscale? if so, how did you do it?

23

Hey HHF, can you tell me if you still have time to show how to enable the internal Headscale DERP server in combination with Pangolin? I have no idea what routes and middleware might look like.

24

Iā€™m a bit confused (what else is new?). So, by following this guide, will my end users still be able to access my pangolin-proxied resources without being on the headscale vpn?

25

this is self-hosted tailscale. if doesnā€™t interfere with pangolin at all. both are running parallel.

26

i havenā€™t tried it yet. will let you know once if try it

27

That would be nice. ThanksšŸ‘

28

Thatā€™s what I thought. Just wanted to confirm.

You mention that it would be too difficult to manage this and crowdsec? What makes it difficult?

29

Iā€™m getting this error when trying to start up the headscale/headplane containers.

image

Any idea what is causing this?

30

i canā€™t see the error(not clear). can you please attach logs and your deployment files so i can check. use paste bin if possible

31

Apologies for that. I actually figured out the issue. I was pointing to the wrong config file. Seems to be working now.

32

about your other question on crowdsec, i have a work around. ping me on cord

33

Iā€™m actually about to log off for the night. Iā€™ll try to catch you later.

I was able to get headscale/plane set up and I can access headplane. Iā€™m having trouble connecting to a client i tried to set up. Iā€™ll have to troubleshoot that as well.

Thanks for your help!

34

Has anyone here tested headscale 0.26.0?
If so, does it work with the configuration shown above?

35

Did anybody test this config with headscale 0.26 and headplane 0.6?

36

Yes, work!!!

Is important update two images, tale/headplane:0.6.0 and headscale/headscale:0.26.0

Make a backup before.

37

Thanks! Is there a way to reverse proxy to headscale machines?

38

Hello, Thanks for the docs, i can connect to headscale but on connecting i lose access to public internet. Any one idea what I might have been wrong?
Note i have crowdsec running as well, if i should be disabling that?

39

You need to whitelist ips for local and clients in crowdsec. That. Might be the issue.

40

Youā€™re awesome. that worked, thanks