#headscale #headplane #pocketid #oidc
✅ HeadScale configured to use OIDC
❌HeadPlane configured to use OIDC¹
¹ i need to set up HeadPlane anyway and thus, i need to set up my server to use flakes
OK, final update on the wireguard with fancy little web UI (with OIDC) saga! After like 4 days of tinkering, we've discovered there isn't anything that meets all our needs... yet!
Headplane is by far the most featureful and actively maintained, but it's like not quite there. It's a solid 90% there though! They're even working on an official helm chart! They need a bit more documentation and little bit more work on the OIDC and just a little bit more decoupling from headscale itself and then they're there! I'll absolutely be keeping an eye on the project.
In the meantime, I'm honestly really pleased to say that headscale has come a long way and supports OIDC in a nice way now! It really does feel a lot more like what you'd expect from a corporate VPN. It works well with zitadel and I'll definitely be adding the setup to smol-k8s-lab soon :3
I really appreciate the because with no further explanation 😂
We got headscale up using wrenix's chart!
https://codeberg.org/wrenix/helm-charts/src/branch/main/headscale
Now onto headplane!
Finally i got #HeadPlane working with my #Nix flake. Now i "just" need to create a systemd unit so i can include it as a service (currently its started manually for testing).
I updated my #Headscale and #Tailscale blog post with additional information about the Nginx Proxy Manager section (PiHole with wildcard DNS) and an improved ACL diagram that I believe is clearer and more accurate.
English: https://www.lucasjanin.com/2025/01/03/headscale-tailscale-in-a-self-hosted-environment
Français: https://www.lucasjanin.com/2025/01/03/headscale-et-tailscale-dans-un-enviroment-auto-heberge
#VPN #Headplane #ACL #NginxProxyManager #Synology #HomeAssistant #selfhosted #selfhosting #homelab
Mon explortation avec #Headscale et #Tailscale est documenté sur mon blog. J'y discute des différences entre un serveur #VPN et Tailscale, Headscale, la configuration de Docker Compose, l'interface #Headplane, le contrôle d'accès via #ACL, l'intégration avec #NginxProxyManager, les nœuds de sortie, les routes et l'installation sur macOS, iOS, Linux, Debian, Proxmox LXC, #Synology NAS et #HomeAssistant.
#selfhosted #selfhosting
https://www.lucasjanin.com/2025/01/03/headscale-et-tailscale