Integrating Headscale and Headplane with Pangolin

Networking
, ,
21

These are my traefik labels which work. Headplan developer changed it from /admin to /admin/

labels:
  - traefik.enable=true
  # Router Definition 
  - traefik.http.routers.headplane-rtr.rule=Host(`${HS_URL}`) && PathPrefix(`/admin`)
  - traefik.http.routers.headplane-rtr.priority=100 # sets priority over base-domain
  - traefik.http.routers.headplane-rtr.entrypoints=websecure
  - traefik.http.routers.headplane-rtr.tls.certresolver=myresolver
  - traefik.http.services.headplane-svc.loadbalancer.server.port=3000 # headplane port
  # ---- Middleware for redirect ----
  - traefik.http.middlewares.headplane-addslash.redirectregex.regex=^https?://([^/]+)/admin$$
  - traefik.http.middlewares.headplane-addslash.redirectregex.replacement=https://$${1}/admin/
  - traefik.http.middlewares.headplane-addslash.redirectregex.permanent=true
1 Like
22

does anyone here use pocket-id (oidc) to secure headscale? if so, how did you do it?

1 Like
23

Hey HHF, can you tell me if you still have time to show how to enable the internal Headscale DERP server in combination with Pangolin? I have no idea what routes and middleware might look like.

1 Like
24

Iā€™m a bit confused (what else is new?). So, by following this guide, will my end users still be able to access my pangolin-proxied resources without being on the headscale vpn?

1 Like
25

this is self-hosted tailscale. if doesnā€™t interfere with pangolin at all. both are running parallel.

26

i havenā€™t tried it yet. will let you know once if try it

27

That would be nice. ThanksšŸ‘

1 Like
28

Thatā€™s what I thought. Just wanted to confirm.

You mention that it would be too difficult to manage this and crowdsec? What makes it difficult?

1 Like
29

Iā€™m getting this error when trying to start up the headscale/headplane containers.

image

Any idea what is causing this?

1 Like
30

i canā€™t see the error(not clear). can you please attach logs and your deployment files so i can check. use paste bin if possible

31

Apologies for that. I actually figured out the issue. I was pointing to the wrong config file. Seems to be working now.

1 Like
32

about your other question on crowdsec, i have a work around. ping me on cord

33

Iā€™m actually about to log off for the night. Iā€™ll try to catch you later.

I was able to get headscale/plane set up and I can access headplane. Iā€™m having trouble connecting to a client i tried to set up. Iā€™ll have to troubleshoot that as well.

Thanks for your help!

2 Likes
34

Has anyone here tested headscale 0.26.0?
If so, does it work with the configuration shown above?

2 Likes
35

Did anybody test this config with headscale 0.26 and headplane 0.6?

1 Like
36

Yes, work!!!

Is important update two images, tale/headplane:0.6.0 and headscale/headscale:0.26.0

Make a backup before.

3 Likes
37

Thanks! Is there a way to reverse proxy to headscale machines?

1 Like
38

Hello, Thanks for the docs, i can connect to headscale but on connecting i lose access to public internet. Any one idea what I might have been wrong?
Note i have crowdsec running as well, if i should be disabling that?

1 Like
39

You need to whitelist ips for local and clients in crowdsec. That. Might be the issue.

40

Youā€™re awesome. that worked, thanks

1 Like