counterweight/personal_infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

headscale: drop the dead Headplane admin route

Browse source 
Caddy proxied /admin* to Headplane behind basic auth, but nothing in this repo
ever installed Headplane, so the route led nowhere. The vhost is now a plain
reverse proxy: the headscale API authenticates every request itself.

The headscale_ui_* vault entries are now unused and can be removed.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
This commit is contained in:
counterweight 2026-10-19 22:10:23 +02:00
parent 9181ff6e10
commit ffcb0a8672
Signed by: counterweight
GPG key ID: 883EDBAA726BD96C
2 changed files with 3 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

3
ansible/services/headscale/headscale_vars.yml
View file

@ -18,6 +18,3 @@ remote_host: "{{ hostvars.get(remote_host_name, {}).get('ansible_host', remote_h
remote_user: "{{ hostvars.get(remote_host_name, {}).get('ansible_user', 'counterweight') }}"
remote_key_file: "{{ hostvars.get(remote_host_name, {}).get('ansible_ssh_private_key_file', '') }}"
remote_port: "{{ hostvars.get(remote_host_name, {}).get('ansible_port', 22) }}"
# Headplane (headscale admin UI), proxied at /admin* behind Caddy basic auth
headplane_port: 3000