3714 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Kristoffer Dalby	33e9e7a71f	CLAUDE: split into agents ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	ccd79ed8d4	mcp: add some standard mcp server ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	f6c4b338fd	.github/workflows: add generate check ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	306d8e1bd4	integration: validate expected online status in ping ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	4927e9d590	fix: improve mapresponses and profiles extraction in hi tool ... - Fix directory hierarchy flattening by using full paths instead of filepath.Base() - Remove redundant container hostname prefixes from directory names - Strip top-level directory from tar extraction to avoid nested structure - Ensure parent directories exist before creating files - Results in clean structure: control_logs/mapresponses/1-ts-client/file.json	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	8e25f7f9dd	bunch of qol (#2748)	2025-08-27 17:09:13 +02:00
github-actions[bot]	1a7a2f4196	flake.lock: Update (#2699)	2025-08-24 12:07:32 +00:00
Dylan Blanqué	860a8a597f	Update tools.md ... Share/Contribute Headscale Zabbix Monitoring scripts and templates. Thank you for the awesome application to everyone involved in Headscale's development!	2025-08-24 06:05:21 +02:00
cuiweixie	a2a6d20218	Refactor to use reflect.TypeFor	2025-08-23 20:43:49 +02:00
Andrey Bobelev	d29feaef79	chore(derp): allow nil regions in DERPMaps ... Previously, nil regions were not properly handled. This change allows users to disable regions in DERPMaps. Particularly useful to disable some official regions.	2025-08-23 06:54:14 +02:00
Andrey Bobelev	630bfd265a	chore(derp): prioritize loading DERP maps from URLs ... This allows users to override default entries provided via URL	2025-08-23 06:54:14 +02:00
Florian Preinstorfer	e949859d33	Add DERP docs	2025-08-22 12:09:31 +02:00
Florian Preinstorfer	4d61da30d0	Use an IPv4 address range suitable for documentation	2025-08-22 12:09:31 +02:00
Kristoffer Dalby	b87567628a	derp: increase update frequency and harden on failures (#2741)	2025-08-22 10:40:38 +02:00
dotlambda	51c6367bb1	Correctly document the default for dns.override_local_dns	2025-08-19 15:02:49 +02:00
Florian Preinstorfer	be337c6a33	Enable derp.server.verify_clients by default ... This setting is already enabled in example-config.yaml but would default to false if no key is set.	2025-08-19 11:30:44 +02:00
Shourya Gautam	086fcad7d9	Fix Internal server error on /verify (#2735) ... * converted the returned error to an httpError	2025-08-18 14:39:42 +00:00
afranco	3e3c72ea6f	docs(acls): Add example for allow/deny all acl policy	2025-08-18 16:13:14 +02:00
afranco	43f90d205e	fix: allow all traffic if acls field is omited from the policy	2025-08-18 16:13:14 +02:00
Florian Preinstorfer	7b8b796a71	docs: connect Android using a preauthkey ... Fixes: #2616	2025-08-18 16:06:17 +02:00
nblock	fa619ea9f3	Fix CHANGELOG for autogroup:member and autogroup:tagged (#2733)	2025-08-18 08:59:03 +02:00
Florian Preinstorfer	30a1f7e68e	Log registrationID to simplify interactive node registration ... Some clients such as Android make it hard to transfer the registrationID to the server, its easier to get it from the server logs.	2025-08-15 17:11:38 +02:00
Florian Preinstorfer	30cec3aa2b	Document ports in use ... Ref: #1767	2025-08-14 09:24:09 +02:00
Fredrik Ekre	5d8a2c25ea	OIDC: Query userinfo endpoint before verifying user ... This patch includes some changes to the OIDC integration in particular: - Make sure that userinfo claims are queried *before* comparing the user with the configured allowed groups, email and email domain. - Update user with group claim from the userinfo endpoint which is required for allowed groups to work correctly. This is essentially a continuation of #2545. - Let userinfo claims take precedence over id token claims. With these changes I have verified that Headscale works as expected together with Authelia without the documented escape hatch [0], i.e. everything works even if the id token only contain the iss and sub claims. [0]: https://www.authelia.com/integration/openid-connect/headscale/#configuration-escape-hatch	2025-08-11 17:51:16 +02:00
Jeff Emershaw	b4f7782fd8	support force flag for nodes backfillips	2025-08-10 13:31:24 +02:00
eyjhb	d77874373d	feat: add robots.txt	2025-08-10 10:57:45 +02:00
Kristoffer Dalby	a058bf3cd3	mapper: produce map before poll (#2628)	2025-07-28 11:15:53 +02:00
Luke Watts	b2a18830ed	docs: fix typos	2025-07-28 10:28:49 +02:00
Kristoffer Dalby	9779adc0b7	integration: run headscale with delve and debug symbols (#2689)	2025-07-24 17:44:09 +02:00
nblock	e7fe645be5	Fix invocation of golangci-lint (#2703)	2025-07-24 08:41:20 +02:00
Florian Preinstorfer	bcd80ee773	Add debugging and troubleshooting guide	2025-07-22 14:56:45 +02:00
Florian Preinstorfer	c04e17d82e	Document valid log levels ... Also change the order as the level seems more important than the format.	2025-07-22 14:56:45 +02:00
Florian Preinstorfer	98fc0563ac	Bump version in docs	2025-07-22 14:56:45 +02:00
Kian-Meng Ang	3123d5286b	Fix typos ... Found via `codespell -L shs,hastable,userr`	2025-07-21 12:06:07 +02:00
Kristoffer Dalby	7fce5065c4	all: remove 32 bit support (#2692)	2025-07-16 13:32:59 +02:00
Florian Preinstorfer	a98d9bd05f	The preauthkeys commands expect a user id instead of a username	2025-07-16 09:53:05 +02:00
Florian Preinstorfer	46c59a3fff	Fix command in bug report template	2025-07-15 21:12:32 +02:00
Kristoffer Dalby	044193bf34	integration: Use Eventually around external calls (#2685)	2025-07-13 17:37:11 +02:00
Mohammad Javad Naderi	a8f2eebf66	Fix config param name in TLS doc	2025-07-13 12:56:25 +02:00
github-actions[bot]	6220e64978	flake.lock: Update (#2669)	2025-07-13 06:36:04 +00:00
Kristoffer Dalby	c6d7b512bd	integration: replace time.Sleep with assert.EventuallyWithT (#2680)	2025-07-10 23:38:55 +02:00
Kristoffer Dalby	b904276f2b	poll: use nodeview everywhere ... There was a bug in HA subnet router handover where we used stale node data from the longpoll session that we handed to Connect. This meant that we got some odd behaviour where routes would not be deactivated correctly. This commit changes to the nodeview is used through out, and we load the current node to be updated in the write path and then handle it all there to be consistent. Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-07-08 21:05:15 +02:00
Kristoffer Dalby	4a8d2d9ed3	.github/workflows: reduce integration retry to 3 ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-07-08 07:28:35 +01:00
Kristoffer Dalby	22e6094a90	golangci: disable varnamelen ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-07-07 21:28:59 +01:00
Kristoffer Dalby	73023c2ec3	all: use immutable node view in read path ... This commit changes most of our (*)types.Node to types.NodeView, which is a readonly version of the underlying node ensuring that there is no mutations happening in the read path. Based on the migration, there didnt seem to be any, but the idea here is to prevent it in the future and simplify other new implementations. Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-07-07 21:28:59 +01:00
Kristoffer Dalby	5ba7120418	.github/workflows: prettier ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-07-07 15:48:38 +01:00
Kristoffer Dalby	d311d2e206	flake: dont override gopls ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-07-07 15:48:38 +01:00
Kristoffer Dalby	05996a5048	.github/workflow: only run a few selected postgres tests ... We are already being punished by github actions, there seem to be little value in running all the tests for both databases, so only run a few key tests to check postgres isnt broken. Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-07-07 15:48:38 +01:00
Kristoffer Dalby	4668e5dd96	changelog: add entry for db ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-07-07 15:48:38 +01:00
Kristoffer Dalby	c6736dd6d6	db: add sqlite "source of truth" schema ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-07-07 15:48:38 +01:00