counterweight
ffcb0a8672
Caddy proxied /admin* to Headplane behind basic auth, but nothing in this repo ever installed Headplane, so the route led nowhere. The vhost is now a plain reverse proxy: the headscale API authenticates every request itself. The headscale_ui_* vault entries are now unused and can be removed. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
20 lines
770 B
YAML
20 lines
770 B
YAML
# Headscale service configuration
|
|
# (subdomain in group_vars/all/main.yml, caddy_sites_dir in roles/caddy_site/defaults/)
|
|
|
|
headscale_port: 8080
|
|
headscale_grpc_port: 50443
|
|
|
|
# Version
|
|
headscale_version: "0.26.1"
|
|
|
|
# Data directory
|
|
headscale_data_dir: /var/lib/headscale
|
|
|
|
# Namespace is headscale_namespace in group_vars/all/main.yml
|
|
|
|
# Remote access
|
|
remote_host_name: "{{ groups['vpn_control'] | first }}"
|
|
remote_host: "{{ hostvars.get(remote_host_name, {}).get('ansible_host', remote_host_name) }}"
|
|
remote_user: "{{ hostvars.get(remote_host_name, {}).get('ansible_user', 'counterweight') }}"
|
|
remote_key_file: "{{ hostvars.get(remote_host_name, {}).get('ansible_ssh_private_key_file', '') }}"
|
|
remote_port: "{{ hostvars.get(remote_host_name, {}).get('ansible_port', 22) }}"
|