Self-hosted Tailscale: веб-интерфейс и вход без паролей https://www.juev.org/2026/03/13/headscale-headplane-oidc/
#headscale #headplane #pocketid #oidc

✅ HeadScale configured to use OIDC
❌HeadPlane configured to use OIDC¹

¹ i need to set up HeadPlane anyway and thus, i need to set up my server to use flakes

#HeadScale #HeadPlane #TailScale #NixOS #OIDC

OK, final update on the wireguard with fancy little web UI (with OIDC) saga! After like 4 days of tinkering, we've discovered there isn't anything that meets all our needs... yet!

Headplane is by far the most featureful and actively maintained, but it's like not quite there. It's a solid 90% there though! They're even working on an official helm chart! They need a bit more documentation and little bit more work on the OIDC and just a little bit more decoupling from headscale itself and then they're there! I'll absolutely be keeping an eye on the project.

In the meantime, I'm honestly really pleased to say that headscale has come a long way and supports OIDC in a nice way now! It really does feel a lot more like what you'd expect from a corporate VPN. It works well with zitadel and I'll definitely be adding the setup to smol-k8s-lab soon :3

#headplane #headscale #wireguard

I really appreciate the because with no further explanation 😂

#headplane #headscale

We got headscale up using wrenix's chart!

https://codeberg.org/wrenix/helm-charts/src/branch/main/headscale

Now onto headplane! 

#headscale #headplane #helm #k8s

helm-charts

My collection of helm charts. Helm is the best way to find, share, and use software built for Kubernetes.

Codeberg.org

Finally i got #HeadPlane working with my #Nix flake. Now i "just" need to create a systemd unit so i can include it as a service (currently its started manually for testing).

#HeadScale #NixOS

Okay so i got #Headplane running manually (non-nix) on my #NixOS host, but i fail to write a working package flake.
Why oh why does it have to be a #PNPM application. The wiki does not help much either.
Did any of you know of an app where i can get inspired? Or has done it themselves?
I am so close.

I updated my #Headscale and #Tailscale blog post with additional information about the Nginx Proxy Manager section (PiHole with wildcard DNS) and an improved ACL diagram that I believe is clearer and more accurate.

English: https://www.lucasjanin.com/2025/01/03/headscale-tailscale-in-a-self-hosted-environment

Français: https://www.lucasjanin.com/2025/01/03/headscale-et-tailscale-dans-un-enviroment-auto-heberge

#VPN #Headplane #ACL #NginxProxyManager #Synology #HomeAssistant #selfhosted #selfhosting #homelab

Mon explortation avec #Headscale et #Tailscale est documenté sur mon blog. J'y discute des différences entre un serveur #VPN et Tailscale, Headscale, la configuration de Docker Compose, l'interface #Headplane, le contrôle d'accès via #ACL, l'intégration avec #NginxProxyManager, les nœuds de sortie, les routes et l'installation sur macOS, iOS, Linux, Debian, Proxmox LXC, #Synology NAS et #HomeAssistant.

#selfhosted #selfhosting
https://www.lucasjanin.com/2025/01/03/headscale-et-tailscale