headscale helm

No introduction found. Create it?

Install

Install with:

helm repo add bjw-s oci://ghcr.io/bjw-s/helm/
helm install headscale bjw-s/app-template -f values.yaml

Examples

See examples from other people.

Top Repositories (3 out of 8)

NameRepoStarsVersionTimestamp
headscalejoryirving/home-ops1433.5.1a month ago
headscaleharaldkoch/kochhaus-home1203.5.12 months ago
headscaleJJGadgets/Biohazard412.6.09 months ago

Values

See the most popular values for this chart:

KeyTypes
string
string
persistence.config.advancedMounts.headscale.app[].path (5)
/etc/headscale/config.yaml
/etc/headscale/policy.json
string
string
string
boolean
string
string
boolean
string
string
boolean
string
boolean
string
string
persistence.config.mountPath (1)
/etc/headscale/config.yaml
string
boolean
string
string
string
string
string
string
string
string
string
boolean
string
boolean
string
string
string
persistence.keys.advancedMounts.headscale.headscale[].path (1)
/etc/headscale/private.key
/etc/headscale/noise_private.key
string
string
persistence.keys.name (1)
headscale-keys-secret
string
string
string
string
boolean
persistence.nfs.path (1)
${PATH_NAS_PERSIST_K8S}/headscale
string
string
string
string
string
persistence.secrets.advancedMounts.main.main[].path (1)
/etc/headscale/private.key
/etc/headscale/noise_private.key
/oidc/secret
string
boolean
persistence.secrets.advancedMounts.main.main[].subPath (1)
private.key
noise_private.key
oidc_client_secret
string
number
boolean
string
string
boolean
string
string
string
persistence.tls.advancedMounts.main.main[].path (1)
/tls/fullchain.pem
/tls/privkey.pem
string
boolean
string
number
boolean
string
string
string
number
boolean
number
number
string
number
string
string
string
string
boolean
number
string
number
boolean
number
string
boolean
number
string
string
string
boolean
string
number
string
string
string
controllers.headscale.containers.app.image.tag (5)
v0.23.0@sha256:ffe793968ef6fbec78a8d095893fe03112e6a74231afe366eb504fbc822afea6
string
string
boolean
string
string
boolean
boolean
number
number
boolean
boolean
string
string
string
string
string
string
string
string
string
string
string
string
string
string
controllers.headscale.containers.app.env.HEADSCALE_DERP_URLS (1)
https://controlplane.tailscale.com/derpmap/default
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
controllers.headscale.containers.headscale.image.tag (1)
0.23.0-alpha12@sha256:31c31103931fee0269017a21330332d83269ccd139f736c8ce8d0cc8ab053068
string
boolean
boolean
boolean
number
number
boolean
string
boolean
string
string
string
string
number
string
string
controllers.ui.containers.app.image.repository (4)
ghcr.io/gurucomputing/headscale-ui
string
controllers.ui.containers.app.image.tag (4)
2024.02.24-beta1@sha256:4c618a7b6e8b32f5ef6af3c7e6936c63e8568ad9ae8d190dafb2551a64ff40a2
string
boolean
boolean
string
string
string
string
string
controllers.ui.containers.headscale.env.HS_SERVER (1)
https://headscale.${EXTERNAL_DOMAIN}
string
string
string
string
string
string
string
string
string
string
string
string
string
string
boolean
string
string
string
boolean
boolean
boolean
number
number
boolean
string
number
number
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
boolean
string
boolean
string
string
string
controllers.main.containers.main.image.tag (1)
0.23.0@sha256:fd2a5326d0742a98597e33acbb33a6055afbe9c98b05919a7ff65bb0715f9bb4
string
string
string
string
boolean
string
boolean
controllers.main.initContainers.01-litestream-restore.args[] (1)
- restore
- -if-db-not-exists
- -if-replica-exists
- -v
- /var/run/headscale/headscale.db
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
string
boolean
string
boolean
string
string
string
number
string
ingress.headscale.hosts[].host (4)
headscale.${EXTERNAL_DOMAIN}
string
string
string
string
string
ingress.headscale.tls[].hosts[] (3)
- headscale.${EXTERNAL_DOMAIN}
string
string
string
string
string
string
boolean
string
ingress.app.annotations."external-dns.alpha.kubernetes.io/target" (2)
ipv4.${SECRET_DOMAIN},external-utility.${SECRET_DOMAIN}
string
string
string
string
ingress.app.hosts[].host (2)
{{ .Release.Name }}.${SECRET_DOMAIN}
string
string
string
string
boolean
string
string
string
string
string
string
string
ingress.main.annotations."traefik.ingress.kubernetes.io/router.middlewares" (1)
networking-traefik-middleware-chain-no-auth@kubernetescrd
string
boolean
ingress.main.hosts[].host (1)
headscale.${SECRET_DOMAIN}
string
string
string
string
ingress.main.tls[].hosts[] (1)
- headscale.${SECRET_DOMAIN}
string
ingress.main.tls[].secretName (1)
${SECRET_DOMAIN/./-}-production-tls
string
string
string
string
string
string
string
string
string, number
string, number
defaultPodOptions.securityContext.sysctls[].name (3)
net.ipv4.ip_unprivileged_port_start
string
string
string, number
string
boolean
string
boolean
number
boolean
string
string
string
boolean
string
string
string
string
string
string
boolean
string
string
string
string
string
string
args[] (1)
- headscale
- serve
string
configMaps.config.data."config.yaml" (1)
server_url: https://${APP_DNS_HEADSCALE}:443 listen_addr: 0.0.0.0:8080 metrics_listen_addr: 0.0.0.0:9090 grpc_listen_addr: 127.0.0.1:50443 grpc_allow_insecure: false private_key_path: /etc/headscale/private.key noise: private_key_path: /etc/headscale/noise_private.key db_type: sqlite3 db_path: /var/run/headscale/headscale.db tls_cert_path: "/tls/fullchain.pem" tls_key_path: "/tls/privkey.pem" log: format: json level: info logtail: enabled: false #acl_policy_path: "/etc/headscale/acl.hujson" ip_prefixes: - ${CONFIG_HEADSCALE_IPV4} randomize_client_port: false dns_config: magic_dns: true base_domain: ${DNS_SHORT} override_local_dns: true nameservers: - ${IP_HOME_DNS} domains: - ${DNS_SHORT} derp: server: enabled: true region_id: 999 region_code: "Biohazard" region_name: "Biohazard-Home-Relay" stun_listen_addr: "0.0.0.0:3478" urls: - https://controlplane.tailscale.com/derpmap/default paths: [] auto_update_enabled: true update_frequency: 24h disable_check_updates: true ephemeral_node_inactivity_timeout: 30m node_update_check_interval: 10s oidc: only_start_if_oidc_is_available: true issuer: "${SECRET_HEADSCALE_OIDC_URL}" client_id: "${SECRET_HEADSCALE_OIDC_ID}" client_secret_path: "/oidc/secret" scope: ["openid", "profile", "email"] expiry: 30d use_expiry_from_token: false extra_params: domain_hint: ${DNS_MAIN} allowed_domains: - ${APP_DNS_AUTH} - ${DNS_MAIN}
string
configMaps.config.data.litestream-replicate (1)
dbs: - path: /var/run/headscale/headscale.db replicas: - name: "nas" type: "file" path: "/nfs" retention: 168h validation-interval: 1h age: recipients: - ${AGE_PUBKEY} - name: "r2" type: "s3" endpoint: "${R2_ENDPOINT}" bucket: "${R2_BUCKET}" path: "headscale" force-path-style: true retention: 168h validation-interval: 24h age: recipients: - ${AGE_PUBKEY}
string
configMaps.config.data.litestream-restore (1)
dbs: - path: /var/run/headscale/headscale.db replicas: - name: "nas" type: "file" path: "/nfs" retention: 168h validation-interval: 1h age: identities: - ${AGE_SECRET} - name: "r2" type: "s3" endpoint: "${R2_ENDPOINT}" bucket: "${R2_BUCKET}" path: "headscale" force-path-style: true retention: 168h validation-interval: 24h age: identities: - ${AGE_SECRET}
string
boolean
string
string
string
string
env.TZ (1)
${TIMEZONE}
string
image.repository (1)
ghcr.io/juanfont/headscale
string
image.tag (1)
latest@sha256:aadf29a875bb2ffdf6579869e5759935f7a64b9fd19fcea9d5385c5d7220dc7b
string
string
string
string
string
string
string
string
string