2025-10-11 - 2026-01-11
Overview
6 Releases published by 1 user
Published
v0.28.0-beta.1
Published
v0.27.2-rc.1
Published
v0.27.1
Published
v0.27.0
2880 Issues closed from 1 user
Closed
#2972 [PR #2966] [CLOSED] V0.27.1.skitz0
Closed
#2973 [PR #2969] [MERGED] changelog: prepare for 0.28.0 beta
Closed
#2976 [PR #2980] [MERGED] Add headscale-operator
Closed
#2977 [PR #2984] [MERGED] sqliteconfig: add config opt for tx locking
Closed
#2970 [PR #2964] [MERGED] batcher: ensure removal from batcher
Closed
#2971 [PR #2968] [MERGED] Legacy preauthkeys must be used as-is
Closed
#2967 [PR #2960] [MERGED] split TestAutoApproveMultiNetwork
Closed
#2968 [PR #2963] [CLOSED] integration: validate that #2615 is not happening anymore
Closed
#2969 [PR #2961] [MERGED] tags: ensure tag changes propagate
Closed
#2960 [PR #2953] [MERGED] fix: list-routes command now respects identifier filter with JSON output
Closed
#2961 [PR #2954] [MERGED] .github/workflows: prebuilt integration test artifacts
Closed
#2962 [PR #2955] [MERGED] types: add option to disable taildrop, improve tests
Closed
#2963 [PR #2956] [MERGED] capver: generate for 1.92
Closed
#2964 [PR #2957] [MERGED] batcher: fix closed panic
Closed
#2957 [PR #2950] [MERGED] mapper: move tail node conversion to node type
Closed
#2958 [PR #2952] [MERGED] all: remove deadcode
Closed
#2959 [PR #2951] [MERGED] cli: better formatting of lists
Closed
#2953 [PR #2943] [CLOSED] feat: add ping CLI command and integration tests
Closed
#2954 [PR #2946] [MERGED] golangci-lint: use forbidigo to block time.Sleep
Closed
#2955 [PR #2948] [MERGED] Use lists for integration docs
Closed
#2950 [PR #2942] [CLOSED] feat: implement PingNode gRPC handler
Closed
#2951 [PR #2944] [MERGED] Use debian13 distroless images
Closed
#2952 [PR #2945] [MERGED] docs(tools): Add tailscale-exporter
Closed
#2947 [PR #2940] [CLOSED] feat: add ping scheduler for node liveness checks
Closed
#2948 [PR #2941] [CLOSED] feat: add PingNode RPC protobuf definitions
Closed
#2940 [PR #2930] [MERGED] policy: allow tags to own tags
Closed
#2942 [PR #2933] [MERGED] hscontrol: log acme/autocert errors
Closed
#2943 [PR #2931] [MERGED] tags: process tags on registration, simplify policy
Closed
#2944 [PR #2936] [CLOSED] fix: compilation error in auth_test.go - CreatePreAuthKey expects pointer
Closed
#2935 [PR #2919] [MERGED] cmd/hi: reject if we are already running
Closed
#2936 [PR #2921] [MERGED] generate: add new patches
Closed
#2937 [PR #2920] [MERGED] modernize: run gopls modernize to bring up to 1.25
Closed
#2938 [PR #2922] [MERGED] cli: remove node move command
Closed
#2939 [PR #2928] [MERGED] fixes from 0.27.2
Closed
#2932 [PR #2913] [MERGED] docs: Enable automatic theme switching
Closed
#2933 [PR #2917] [MERGED] auth: ensure machines are allowed in when pak change
Closed
#2934 [PR #2916] [CLOSED] Tailcfg.ping request #2902
Closed
#2930 [PR #2914] [MERGED] Added a check for empty MetricAddr before listening
Closed
#2931 [PR #2915] [MERGED] Misc docs related fixes
Closed
#2926 [PR #2897] [MERGED] Add docs about how to communicate with the service as non headscale local user
Closed
#2927 [PR #2900] [MERGED] Remove duplicated docs and use /health
Closed
#2929 [PR #2908] [CLOSED] Fixes #2907 for usedIPs for ephemeral nodes
Closed
#2920 [PR #2886] [MERGED] hscontrol/state: make NodeStore batch configuration tunable
Closed
#2921 [PR #2889] [MERGED] Containers should be read-only
Closed
#2922 [PR #2890] [MERGED] hscontrol/oidc: fix ACL policy not applied to new OIDC nodes
Closed
#2923 [PR #2894] [MERGED] [Docs] Clarify OIDC "scope" setting for Entra
Closed
#2915 [PR #2881] [MERGED] cmd/hi: improve test cleanup to reduce CI disk usage
Closed
#2916 [PR #2882] [MERGED] chore: fix filterHash to work with autogroup:self in the acls
Closed
#2917 [PR #2884] [MERGED] db: remove _schema from migration tests
Closed
#2918 [PR #2885] [MERGED] make tags first class node owner
Closed
#2919 [PR #2883] [MERGED] hscontrol/db: add init schema, drop pre-0.25 support
Closed
#2912 [PR #2877] [MERGED] add pre-commit hooks, move claude to agents.
Closed
#2913 [PR #2880] [MERGED] Explicitly drop apt-get clean and use dist-clean
Closed
#2914 [PR #2879] [MERGED] prettier: use standard config for all files including changelog
Closed
#2909 [PR #2874] [MERGED] policy: fix issue where non existent user results in empty ssh pol
Closed
#2910 [PR #2875] [MERGED] {state,db}: preserve node expiry on MapRequest updates
Closed
#2911 [PR #2878] [MERGED] changelog: prepare for 0.27.1
Closed
#2903 [PR #2861] [MERGED] fix: make state cookies valid when client uses multiple login URLs
Closed
#2904 [PR #2860] [MERGED] Configurable email_verified OIDC Claim Requirement
Closed
#2906 [PR #2872] [MERGED] db: add defensive removal of old indices
Closed
#2907 [PR #2865] [MERGED] Document how to restrict access to exit nodes per user/group
Closed
#2908 [PR #2873] [MERGED] db: add comment about removing migrations
Closed
#2900 [PR #2857] [MERGED] nix: add NixOS module and tests
Closed
#2901 [PR #2858] [MERGED] Add Favicon to web pages
Closed
#2902 [PR #2859] [MERGED] state: allow expired auth keys for node re-registration
Closed
#2899 [PR #2855] [MERGED] types: Distinguish subnet and exit node access
Closed
#2895 [PR #2854] [MERGED] cli: only validate bypass-grpc set policy
Closed
#2896 [PR #2852] [CLOSED] Fix exit node visibility - enforce autogroup:internet ACL requirement
Closed
#2897 [PR #2853] [MERGED] types: make pre auth key use bcrypt
Closed
#2898 [PR #2856] [MERGED] send endpoint and derp only updates.
Closed
#2890 [PR #2844] [MERGED] db: remove all old, unused tables
Closed
#2891 [PR #2848] [MERGED] Fix flaky TestShuffleDERPMapDeterministic by ensuring deterministic map iteration
Closed
#2892 [PR #2849] [CLOSED] Add TestPingAllByIPRandomClientPort to validate direct connections with randomize_client_port
Closed
#2893 [PR #2850] [CLOSED] Filter exit node visibility through ACL policy
Closed
#2894 [PR #2851] [CLOSED] Fix Domain() to return BaseDomain instead of ServerURL hostname
Closed
#2886 [PR #2831] [MERGED] remove unused ips from alloc ipset
Closed
#2887 [PR #2832] [MERGED] templates: migrate OIDC callback to elem-go, give an overhaul
Closed
#2888 [PR #2843] [MERGED] db: ignore _litestream tables when validating
Closed
#2889 [PR #2842] [MERGED] chore: fix autogroup:self with other acl rules
Closed
#2884 [PR #2823] [MERGED] changelog: set 0.27 date
Closed
#2885 [PR #2828] [MERGED] expire nodes with a custom timestamp
Closed
#2880 [PR #2820] [MERGED] .goreleaser: add upgrade section
Closed
#2881 [PR #2821] [MERGED] hscontrol: add /version HTTP endpoint
Closed
#2882 [PR #2827] [MERGED] Use current stable base images for Debian and Alpine
Closed
#2883 [PR #2822] [CLOSED] debug: add /debug/http-routes endpoint
Closed
#2875 [PR #2813] [MERGED] cli: do not show new pre-releases on stable
Closed
#2876 [PR #2815] [MERGED] integration: reduce TestAutoApproveMultiNetwork matrix to 3 tests
Closed
#2877 [PR #2814] [MERGED] gen: test-integration
Closed
#2878 [PR #2819] [MERGED] Add API documentation
Closed
#2879 [PR #2818] [MERGED] Add creation_time and ko_data_creation_time to goreleaser.yml kos
Closed
#2870 [PR #2808] [MERGED] Fix autogroup:self alternative example
Closed
#2871 [PR #2806] [MERGED] Remove outdated hint about an empty config file
Closed
#2872 [PR #2807] [MERGED] policy: fix autogroup:self propagation and optimize cache invalidation
Closed
#2873 [PR #2810] [MERGED] [Fix] Headscale API Bypasses Middleware
Closed
#2874 [PR #2811] [MERGED] integration: add tests for api bypass
Closed
#2865 [PR #2799] [MERGED] integration: eventually fixups
Closed
#2866 [PR #2801] [MERGED] Add healthcheck to container docs
Closed
#2867 [PR #2800] [MERGED] Downgrade completed broadcast message to debug
Closed
#2869 [PR #2805] [MERGED] Add FAQ on how to disable log submission
Closed
#2863 [PR #2798] [MERGED] update dependencies
Closed
#2864 [PR #2797] [MERGED] changelog: prepare for 0.27.0
Closed
#2860 [PR #2786] [MERGED] Update official.md
Closed
#2861 [PR #2795] [MERGED] The sequential prefix allocation uses a best-effort approach
Closed
#2862 [PR #2789] [MERGED] feat: add autogroup:self
Closed
#2855 [PR #2776] [MERGED] Document how to recover from a policy error in the database
Closed
#2856 [PR #2779] [MERGED] flake: goreleaser doesnt follow go nix convention
Closed
#2857 [PR #2778] [MERGED] Add FAQ entry about the recommended upgrade path
Closed
#2858 [PR #2783] [MERGED] Update flake.lock
Closed
#2859 [PR #2781] [MERGED] stability and race conditions in auth and node store
Closed
#2851 [PR #2772] [MERGED] derp: fix flaky shuffle test
Closed
#2852 [PR #2773] [MERGED] fix: return valid AuthUrl in followup request on expired reg id
Closed
#2853 [PR #2774] [MERGED] capver: update latest
Closed
#2854 [PR #2775] [MERGED] mapper: send change instead of full update
Closed
#2850 [PR #2770] [MERGED] cli: use gobuild version handling
Closed
#2849 [PR #2769] [MERGED] app: fix sigint hanging
Closed
#2845 [PR #2765] [MERGED] cmd: add option to get and set policy directly from database
Closed
#2846 [PR #2766] [MERGED] policy: validate error message for asterix in ssh
Closed
#2847 [PR #2767] [MERGED] {policy, node}: allow return paths in route reduction
Closed
#2848 [PR #2768] [MERGED] policy: fix ssh usermap, fixing autogroup:nonroot
Closed
#2840 [PR #2759] [CLOSED] work on #2731
Closed
#2841 [PR #2760] [CLOSED] fix: node list-routes output formatting
Closed
#2842 [PR #2763] [MERGED] poll: add missing godoc
Closed
#2843 [PR #2761] [MERGED] .github/ISSUE_TEMPLATE: add node number to environment
Closed
#2844 [PR #2764] [MERGED] policy: reject unsupported fields
Closed
#2835 [PR #2748] [MERGED] bunch of qol
Closed
#2836 [PR #2752] [CLOSED] fix: return valid AuthUrl in followup request on expired reg id
Closed
#2837 [PR #2756] [CLOSED] <fix> Convert the derpmap parsing from yaml to json to ensure compati…
Closed
#2838 [PR #2755] [MERGED] Update flake.lock
Closed
#2839 [PR #2758] [MERGED] Minor documentation correction
Closed
#2831 [PR #2744] [MERGED] Refresh OIDC documentation for recent updates
Closed
#2832 [PR #2745] [MERGED] Refactor to use reflect.TypeFor
Closed
#2833 [PR #2747] [MERGED] Describe how to remove a DERP region
Closed
#2834 [PR #2746] [MERGED] Update tools.md
Closed
#2827 [PR #2737] [MERGED] Enable derp.server.verify_clients by default
Closed
#2828 [PR #2741] [MERGED] derp: increase update frequency and harden on failures
Closed
#2829 [PR #2739] [CLOSED] Fixed Internal server error on /debug/registration-cache
Closed
#2823 [PR #2733] [MERGED] Fix CHANGELOG for autogroup:member and autogroup:tagged
Closed
#2824 [PR #2732] [MERGED] Add DERP documentation
Closed
#2825 [PR #2735] [MERGED] Fix Internal server error on /verify
Closed
#2826 [PR #2734] [MERGED] Allow all traffic if acls field is omited from the policy
Closed
#2820 [PR #2726] [MERGED] Document ports in use
Closed
#2821 [PR #2727] [MERGED] Fix fatal error on missing config file
Closed
#2822 [PR #2730] [MERGED] Log registrationID to simplify interactive node registration
Closed
#2815 [PR #2712] [CLOSED] integration: expand cli test coverage
Closed
#2817 [PR #2716] [CLOSED] deps: upgrade
Closed
#2819 [PR #2718] [MERGED] docs: connect Android using a preauthkey
Closed
#2811 [PR #2703] [MERGED] Fix invocation of golangci-lint
Closed
#2812 [PR #2706] [CLOSED] integration: add some godoc
Closed
#2814 [PR #2707] [MERGED] docs: fix typos
Closed
#2809 [PR #2700] [MERGED] Fix typos
Closed
#2810 [PR #2701] [MERGED] Add debug and troubleshooting documentation
Closed
#2805 [PR #2691] [MERGED] The preauthkeys commands expect a user id instead of a username
Closed
#2807 [PR #2692] [MERGED] all: remove 32 bit support
Closed
#2808 [PR #2699] [MERGED] Update flake.lock
Closed
#2800 [PR #2685] [MERGED] Use more Eventually in tests
Closed
#2801 [PR #2686] [CLOSED] cmd/hi: prevent concurrent runs and add force flag
Closed
#2802 [PR #2689] [MERGED] integration: run headscale with delve and debug symbols
Closed
#2803 [PR #2690] [MERGED] Fix command in bug report template
Closed
#2804 [PR #2687] [CLOSED] cli expermient3
Closed
#2796 [PR #2677] [MERGED] Fix HA subnet routers from #2639
Closed
#2797 [PR #2679] [CLOSED] fix: prevent single node timeout from blocking all other updates
Closed
#2798 [PR #2684] [MERGED] Fix config param name in TLS doc
Closed
#2799 [PR #2680] [MERGED] integration: replace time.Sleep with assert.EventuallyWithT
Closed
#2792 [PR #2671] [MERGED] all: use immutable node view in read path
Closed
#2793 [PR #2673] [CLOSED] docs: add section for example configurations
Closed
#2794 [PR #2670] [MERGED] Node store
Closed
#2795 [PR #2675] [MERGED] .github/workflows: reduce integration retry to 3
Closed
#2789 [PR #2663] [MERGED] OIDC: Query userinfo endpoint before verifying user
Closed
#2790 [PR #2669] [MERGED] Update flake.lock
Closed
#2791 [PR #2664] [CLOSED] build(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0
Closed
#2785 [PR #2656] [MERGED] don't crash if config file is missing
Closed
#2786 [PR #2658] [MERGED] remove unneeded check
Closed
#2787 [PR #2659] [MERGED] add health command
Closed
#2788 [PR #2661] [MERGED] Clarify SIGHUP log message
Closed
#2780 [PR #2648] [MERGED] cmd/hi: add integration test runner CLI tool
Closed
#2781 [PR #2647] [CLOSED] cmd/headscale: migrate CLI from Cobra to command
Closed
#2782 [PR #2649] [MERGED] cmd/hi: fixes and qol
Closed
#2783 [PR #2653] [MERGED] hscontrol: remove go-grpc-middleware v1 dependency
Closed
#2784 [PR #2654] [MERGED] ci: fix golangci-lint flag for v2 compatibility
Closed
#2775 [PR #2639] [MERGED] state: introduction
Closed
#2776 [PR #2640] [MERGED] Correctly document the default for dns.override_local_dns
Closed
#2777 [PR #2642] [MERGED] Fix /machine/map endpoint vulnerability
Closed
#2778 [PR #2643] [MERGED] feat: add robots.txt
Closed
#2779 [PR #2644] [MERGED] Fixed typo in parseCapabilityVersion, and removed unused error
Closed
#2770 [PR #2632] [CLOSED] 0xlilim patch 4
Closed
#2771 [PR #2633] [CLOSED] Fix: Populate user name from email prefix if OIDC username is invalid
Closed
#2772 [PR #2635] [MERGED] Ensure that a username starts with a letter
Closed
#2774 [PR #2628] [MERGED] mapper: produce map before poll
Closed
#2768 [PR #2625] [MERGED] Refactor OpenID Connect documentation
Closed
#2769 [PR #2624] [MERGED] feat(tools): Add Go client implementation
Closed
#2764 [PR #2617] [MERGED] db: add sqlite "source of truth" schema
Closed
#2765 [PR #2619] [CLOSED] Tags: reimplement, make first class
Closed
#2766 [PR #2620] [MERGED] Add headscale-console web UI to docs
Closed
#2767 [PR #2621] [MERGED] support force flag for nodes backfillips
Closed
#2761 [PR #2609] [MERGED] Fix typo in TailSQL log
Closed
#2762 [PR #2611] [CLOSED] feat(oidc): allow email prefix as username fallback
Closed
#2763 [PR #2614] [MERGED] Refactor Debian/Ubuntu packaging
Closed
#2760 [PR #2607] [MERGED] web: change node registration parameter order
Closed
#2755 [PR #2595] [MERGED] goreleaser: always do draft
Closed
#2756 [PR #2596] [MERGED] allow overriding remote derp map
Closed
#2757 [PR #2600] [MERGED] policy: remove v1 code
Closed
#2758 [PR #2606] [MERGED] policy/v2: error on missing or zero port
Closed
#2759 [PR #2604] [CLOSED] handling a nil panic pointer causing a node to be removed
Closed
#2750 [PR #2591] [MERGED] Do not ignore config-example.yml, HEADSCALE_CONFIG, document breaking change
Closed
#2751 [PR #2590] [MERGED] Remove map_legacy_users from example configuration
Closed
#2752 [PR #2593] [MERGED] users: harden, test, and add cleaner of identifier
Closed
#2753 [PR #2594] [MERGED] changelog: entry for 0.26
Closed
#2754 [PR #2592] [CLOSED] mapper: make online non-ptr
Closed
#2747 [PR #2585] [MERGED] Update flake.lock
Closed
#2748 [PR #2587] [CLOSED] Update code to not risk normalization that changes existing keys
Closed
#2749 [PR #2588] [MERGED] fix: change FormatUint base from 64 to 10 in preauthkeys list command
Closed
#2743 [PR #2579] [MERGED] bring back last_seen in database
Closed
#2744 [PR #2580] [MERGED] cli: policy check, dont require config or log
Closed
#2745 [PR #2581] [MERGED] Add migration steps when policy is stored in the database
Closed
#2746 [PR #2582] [MERGED] Simplify policy migration
Closed
#2740 [PR #2575] [MERGED] Replace magic-nix-cache-action
Closed
#2741 [PR #2576] [MERGED] policy/v2: validate that no undefined group or tag is used
Closed
#2742 [PR #2578] [MERGED] policy/v2: separate exit node and 0.0.0.0/0 routes
Closed
#2735 [PR #2562] [MERGED] Misc doc fixes
Closed
#2736 [PR #2566] [MERGED] app: throw away not found body
Closed
#2737 [PR #2563] [CLOSED] flake: fix vendorHash
Closed
#2738 [PR #2569] [MERGED] Remove subnet router visibility workaround from docs
Closed
#2739 [PR #2572] [MERGED] feat: add autogroup:member, autogroup:tagged
Closed
#2730 [PR #2557] [CLOSED] replace encoding/json with faster go-json
Closed
#2731 [PR #2559] [MERGED] go.mod: update rest of deps
Closed
#2732 [PR #2558] [MERGED] Fix goreleaser deprecation warnings
Closed
#2733 [PR #2560] [MERGED] [docs] Add quotes to docker run command to prevent word splitting
Closed
#2734 [PR #2561] [MERGED] policy: reduce routes sent to peers based on packetfilter
Closed
#2727 [PR #2554] [MERGED] Update source.md
Closed
#2728 [PR #2556] [MERGED] policy/matcher: fix bug using contains instead of overlap
Closed
#2729 [PR #2555] [MERGED] Make more granular SSH tests for both Policies
Closed
#2726 [PR #2552] [MERGED] policy/v2: validate autogroup:interet only in dst
Closed
#2723 [PR #2550] [MERGED] auth: ensure that routes are autoapproved when the node is stored
Closed
#2724 [PR #2551] [MERGED] cli/nodes: filter nodes without any routes
Closed
#2725 [PR #2553] [MERGED] cmd: add policy check command
Closed
#2719 [PR #2545] [MERGED] oidc: try to get username from userinfo
Closed
#2720 [PR #2546] [MERGED] policy/v2: make default
Closed
#2721 [PR #2548] [CLOSED] Update flake.lock
Closed
#2722 [PR #2549] [MERGED] integration: remove failing resolvconf tests
Closed
#2715 [PR #2541] [MERGED] Mention "Network flow logs" as a missing feature in the documentation
Closed
#2716 [PR #2544] [MERGED] config: disallow same server url and base_domain
Closed
#2717 [PR #2542] [MERGED] types/authkey: include user object in response
Closed
#2718 [PR #2543] [MERGED] notify nodes after owner change
Closed
#2710 [PR #2533] [MERGED] policy/v2: fix host validation, consistent pattern
Closed
#2711 [PR #2534] [MERGED] integration: clean up unreferenced hs- networks
Closed
#2712 [PR #2536] [MERGED] Fix panic on fast reconnection of node
Closed
#2713 [PR #2537] [CLOSED] Bump golang.org/x/net from 0.34.0 to 0.38.0
Closed
#2714 [PR #2538] [MERGED] Fix goroutine leak in EphemeralGC on node cancel
Closed
#2705 [PR #2528] [MERGED] fix webauth + autoapprove routes
Closed
#2706 [PR #2529] [CLOSED] Bump github.com/gorilla/csrf from 1.7.3-0.20250123201450-9dd6af1f6d30 to 1.7.3
Closed
#2707 [PR #2531] [MERGED] code comment around tags
Closed
#2708 [PR #2530] [CLOSED] Bump golang.org/x/crypto from 0.32.0 to 0.35.0
Closed
#2709 [PR #2532] [MERGED] more wait, more retry
Closed
#2700 [PR #2510] [MERGED] Update flake.lock
Closed
#2701 [PR #2514] [MERGED] Make matchers part of the Policy interface
Closed
#2702 [PR #2515] [MERGED] Add unraid-headscale-admin web UI to docs
Closed
#2703 [PR #2518] [MERGED] Update flake.lock
Closed
#2704 [PR #2522] [MERGED] update capmap and deps for release
Closed
#2696 [PR #2505] [MERGED] Update oidc.md
Closed
#2697 [PR #2506] [MERGED] fix auto approver on register and new policy
Closed
#2698 [PR #2507] [MERGED] flake: add golang-lint lsp
Closed
#2699 [PR #2509] [MERGED] Only read relevant nodes from database in PeerChangedResponse
Closed
#2693 [PR #2496] [MERGED] Add documentation for routes
Closed
#2694 [PR #2498] [CLOSED] Bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2
Closed
#2695 [PR #2503] [MERGED] ensure final dot on node name
Closed
#2689 [PR #2489] [MERGED] populate serving from primary routes
Closed
#2690 [PR #2490] [MERGED] error on undefined host in policy
Closed
#2691 [PR #2493] [MERGED] OIDC: Fetch UserInfo to get EmailVerified if necessary
Closed
#2692 [PR #2495] [MERGED] allow users to be defined with @ in v1
Closed
#2685 [PR #2481] [MERGED] update bug template with debug
Closed
#2686 [PR #2482] [MERGED] Remove coderabbit
Closed
#2687 [PR #2483] [MERGED] Adds the new third-party tool to the documentation
Closed
#2688 [PR #2488] [MERGED] Explicitly handle /headscale/{config,lib,run} in container docs
Closed
#2679 [PR #2468] [MERGED] Update flake.lock
Closed
#2680 [PR #2473] [CLOSED] Bump golang.org/x/net from 0.34.0 to 0.36.0
Closed
#2681 [PR #2474] [MERGED] add casbin user test
Closed
#2682 [PR #2476] [MERGED] add faq section on scaling/performance
Closed
#2683 [PR #2477] [MERGED] Add a FAQ entry about two nodes seeing each other
Closed
#2684 [PR #2478] [MERGED] Set content-type to JSON for some debug endpoints
Closed
#2676 [PR #2464] [MERGED] Multi network integration tests
Closed
#2677 [PR #2461] [CLOSED] 📝 Update documentation to support i18n, add Chinese.
Closed
#2678 [PR #2470] [MERGED] Container images are also available on GHCR
Closed
#2671 [PR #2457] [MERGED] Drop route table
Closed
#2672 [PR #2448] [CLOSED] Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
Closed
#2673 [PR #2454] [MERGED] Update flake.lock
Closed
#2674 [PR #2445] [MERGED] fix double login URL with OIDC
Closed
#2669 [PR #2440] [MERGED] Update flake.lock
Closed
#2670 [PR #2451] [CLOSED] Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4
Closed
#2665 [PR #2435] [MERGED] handle register auth errors
Closed
#2666 [PR #2437] [CLOSED] use internal derp for most integration tests
Closed
#2667 [PR #2438] [MERGED] Restore support for "Override local DNS"
Closed
#2668 [PR #2444] [MERGED] fix routes not being saved when new nodes registers
Closed
#2660 [PR #2426] [MERGED] use tailscale version in all unsupported errs
Closed
#2661 [PR #2424] [MERGED] activate json logs
Closed
#2662 [PR #2427] [MERGED] update to go 1.24
Closed
#2663 [PR #2429] [MERGED] remove policy handling for old capver
Closed
#2664 [PR #2430] [MERGED] Update flake.lock
Closed
#2655 [PR #2415] [MERGED] add git hash to binary, print on startup
Closed
#2656 [PR #2420] [MERGED] use tsweb debugger
Closed
#2657 [PR #2419] [MERGED] Update flake.lock
Closed
#2658 [PR #2423] [MERGED] set 0.25.0 changelog date
Closed
#2659 [PR #2422] [MERGED] redo all route code
Closed
#2652 [PR #2412] [MERGED] hscontrol/db: add migration setting non existing pak on nodes to null
Closed
#2653 [PR #2413] [MERGED] make version info in bug template more explicit
Closed
#2654 [PR #2414] [MERGED] update changelog
Closed
#2649 [PR #2407] [MERGED] Spell check
Closed
#2650 [PR #2410] [MERGED] use helper function for constructing state updates
Closed
#2651 [PR #2411] [MERGED] remove oidc migration
Closed
#2645 [PR #2400] [CLOSED] config for nginx proxy manager
Closed
#2646 [PR #2405] [MERGED] drop versions older than 1.62
Closed
#2647 [PR #2402] [MERGED] Update flake.lock
Closed
#2648 [PR #2398] [MERGED] Return better web errors to the user
Closed
#2640 [PR #2392] [CLOSED] Fix CVEs
Closed
#2641 [PR #2391] [MERGED] initial capver packet tracking version
Closed
#2642 [PR #2393] [MERGED] no edit of oidc users, minimum hostname length
Closed
#2643 [PR #2396] [MERGED] do not allow preauth keys to be deleted if assigned to node
Closed
#2644 [PR #2394] [MERGED] add 1.80 to capver and update deps
Closed
#2635 [PR #2381] [MERGED] create and rename usernames validated by new func
Closed
#2636 [PR #2383] [MERGED] stricter hostname validation and replace
Closed
#2637 [PR #2386] [MERGED] Remove routes without a node_id
Closed
#2638 [PR #2388] [MERGED] simplify findUserByToken in ACL, add missing testcases
Closed
#2639 [PR #2384] [MERGED] clean up handler methods, common logging
Closed
#2632 [PR #2378] [MERGED] Update flake.lock
Closed
#2633 [PR #2374] [MERGED] Rewrite authentication flow
Closed
#2634 [PR #2380] [CLOSED] Spell check and updating docs
Closed
#2630 [PR #2371] [MERGED] make it harder to insert invalid routes
Closed
#2631 [PR #2372] [CLOSED] test gh actions ARM runners
Closed
#2625 [PR #2364] [MERGED] relax user validation to allow emails, add tests from various oidc providers
Closed
#2626 [PR #2368] [MERGED] fix panic if derp update is 0
Closed
#2627 [PR #2370] [CLOSED] Fixes #2369: panic when derp autoupdate isn't enabled
Closed
#2628 [PR #2367] [MERGED] fix postgres migration issue with 0.24
Closed
#2629 [PR #2358] [MERGED] Headscale implements a single tailnet
Closed
#2620 [PR #2348] [CLOSED] add TestOIDCReloginSameNode
Closed
#2621 [PR #2350] [MERGED] set oidc.map_legacy_users false
Closed
#2622 [PR #2349] [MERGED] Release docs 0.24
Closed
#2623 [PR #2353] [MERGED] Update flake.lock
Closed
#2624 [PR #2357] [CLOSED] refactor: converted headscale.swagger.json to openapi 3.0 + bearer auth
Closed
#2619 [PR #2347] [MERGED] set changelog date for 0.24
Closed
#2615 [PR #2344] [CLOSED] Split MagicDNS base domain and org domain
Closed
#2616 [PR #2345] [CLOSED] mark TestOIDC024UserCreation as flaky
Closed
#2617 [PR #2342] [MERGED] Update flake.lock
Closed
#2618 [PR #2346] [CLOSED] remove retry
Closed
#2610 [PR #2338] [MERGED] use headscale server url as domain instead of base_domain
Closed
#2611 [PR #2340] [MERGED] allow @ and Log if OIDC username is not consider valid
Closed
#2612 [PR #2339] [MERGED] fix nil pointer deref
Closed
#2613 [PR #2337] [MERGED] use dedicated registration ID for auth flow
Closed
#2614 [PR #2334] [CLOSED] Bump golang.org/x/net from 0.32.0 to 0.33.0
Closed
#2607 [PR #2328] [MERGED] Set CSRF cookies for OIDC
Closed
#2608 [PR #2331] [MERGED] Fix typos
Closed
#2609 [PR #2329] [CLOSED] feat: Support for (nextDNS) node attributes (nodeattrs)
Closed
#2605 [PR #2322] [MERGED] feat: Create headscale user and group as system user/groups
Closed
#2606 [PR #2324] [MERGED] Update flake.lock
Closed
#2600 [PR #2313] [MERGED] Update flake.lock
Closed
#2602 [PR #2314] [MERGED] feat: Add PKCE Verifier for OIDC
Closed
#2603 [PR #2320] [MERGED] Update flake.lock
Closed
#2604 [PR #2321] [MERGED] Update apple.md for latest version of iOS
Closed
#2595 [PR #2306] [MERGED] Correct macOS GUI connect guide because there's no ALT key on a mac
Closed
#2596 [PR #2303] [CLOSED] docs: update ios configuration docs
Closed
#2597 [PR #2308] [MERGED] bump deps
Closed
#2598 [PR #2312] [CLOSED] feat: tailscale serve support
Closed
#2599 [PR #2309] [MERGED] fix tags not resolving to username if email is present
Closed
#2590 [PR #2294] [MERGED] Update flake.lock
Closed
#2591 [PR #2297] [MERGED] fix issue where some oidc claim bools are sent as string
Closed
#2592 [PR #2296] [MERGED] fix sighup issue with empty acl
Closed
#2594 [PR #2298] [MERGED] fixes to extra-record file watcher
Closed
#2586 [PR #2282] [CLOSED] chore: use errors.New to replace fmt.Errorf with no parameters
Closed
#2587 [PR #2285] [MERGED] update oidc part of changelog for 0.24.0
Closed
#2588 [PR #2286] [MERGED] fix deletion of exit routes without nodes
Closed
#2589 [PR #2292] [MERGED] Prepare docs for 0.24.0
Closed
#2583 [PR #2280] [CLOSED] feat: allow setting node registration expiration via config
Closed
#2584 [PR #2281] [CLOSED] Bump golang.org/x/crypto from 0.26.0 to 0.31.0
Closed
#2585 [PR #2283] [CLOSED] Misc typos
Closed
#2580 [PR #2271] [MERGED] Add worker reading extra_records_path from file
Closed
#2581 [PR #2273] [MERGED] fix docker network caps
Closed
#2582 [PR #2279] [MERGED] Remove use_username_in_magic_dns option
Closed
#2575 [PR #2261] [MERGED] restructure command/api to use stable IDs
Closed
#2576 [PR #2265] [MERGED] Add versioned documentation
Closed
#2577 [PR #2269] [MERGED] Add FAQ entry on which database to use
Closed
#2578 [PR #2266] [MERGED] Update flake.lock
Closed
#2579 [PR #2270] [MERGED] run cross compile of headscale as part of build
Closed
#2571 [PR #2254] [MERGED] Update flake.lock
Closed
#2572 [PR #2258] [MERGED] Bump deprecated github actions
Closed
#2573 [PR #2255] [MERGED] wrap policy in policy manager interface
Closed
#2574 [PR #2260] [MERGED] feat: add verify client config for embedded DERP
Closed
#2570 [PR #2252] [MERGED] Documentation dependencies
Closed
#2565 [PR #2243] [MERGED] Update tls.md to mention using the full cert chain
Closed
#2566 [PR #2242] [MERGED] make configurable wal auto checkpoint
Closed
#2567 [PR #2245] [CLOSED] #2176 Manual approval of the node
Closed
#2568 [PR #2247] [MERGED] Websocket derp test fixes
Closed
#2569 [PR #2248] [MERGED] config: loosen up BaseDomain and ServerURL checks
Closed
#2560 [PR #2233] [CLOSED] Use a more direct and less error-prone return value
Closed
#2561 [PR #2235] [MERGED] Use discord server invite link
Closed
#2562 [PR #2232] [MERGED] fix: missing stable-debug tag
Closed
#2563 [PR #2239] [MERGED] Update flake.lock
Closed
#2564 [PR #2240] [MERGED] Misc doc fixes
Closed
#2558 [PR #2227] [MERGED] Handle /derp/latency-check
Closed
#2559 [PR #2230] [CLOSED] feat: Add autogroup ACLs
Closed
#2552 [PR #2217] [MERGED] Add a page for third-party tools
Closed
#2553 [PR #2221] [CLOSED] Remove dockerfile bloat
Closed
#2554 [PR #2216] [MERGED] Refresh remote CLI documentation
Closed
#2555 [PR #2226] [MERGED] Feature tvos documentation
Closed
#2556 [PR #2225] [MERGED] rename dockerfile to integration to avoid confusion
Closed
#2557 [PR #2222] [MERGED] Update flake.lock
Closed
#2550 [PR #2214] [MERGED] Experimental implementation of Policy v2
Closed
#2551 [PR #2215] [CLOSED] wrap policy in a manager interface
Closed
#2545 [PR #2202] [MERGED] add new user fields to grpc and list command
Closed
#2547 [PR #2205] [MERGED] Resolve user to stable unique ID in policy
Closed
#2548 [PR #2207] [MERGED] add nblock to doc owners
Closed
#2549 [PR #2212] [MERGED] more linter fixups
Closed
#2543 [PR #2191] [MERGED] Add Headplane to web-ui docs
Closed
#2544 [PR #2199] [MERGED] #2140 Fixed reflection of hostname change
Closed
#2546 [PR #2206] [MERGED] cleanup linter warnings
Closed
#2539 [PR #2185] [CLOSED] #2177 Added conversion of 'Hostname' to 'givenName' in a node by applying FQDN rules
Closed
#2540 [PR #2187] [MERGED] Fixed loginUrl with "WithTLS()" used. Added "WithTLS()" to scenario integration tests
Closed
#2541 [PR #2195] [MERGED] Update flake.lock
Closed
#2542 [PR #2198] [MERGED] #2177 Added conversion of 'Hostname' to 'givenName' in a node with FQDN rules applied
Closed
#2535 [PR #2170] [MERGED] Harden OIDC migration and make optional
Closed
#2536 [PR #2179] [MERGED] #2178 Fixed processing of fields in post request in MoveNode rpc
Closed
#2537 [PR #2173] [MERGED] Update flake.lock
Closed
#2538 [PR #2184] [CLOSED] use https for other relogin tests
Closed
#2530 [PR #2158] [MERGED] Update flake.lock
Closed
#2531 [PR #2163] [MERGED] Restructure headscale documentation
Closed
#2532 [PR #2165] [MERGED] set hostinfo,ipv* columns explicitly
Closed
#2533 [PR #2161] [MERGED] Changed all the html into go using go-elem
Closed
#2534 [PR #2167] [MERGED] make reauth test compat with tailscale head
Closed
#2527 [PR #2156] [MERGED] use gorm serialiser instead of custom hooks
Closed
#2528 [PR #2155] [MERGED] denormalise PreAuthKey tags
Closed
#2529 [PR #2154] [MERGED] [docs] Add Ouroboros to community web ui list
Closed
#2524 [PR #2145] [MERGED] Allow nodes to use SSH agent forwarding
Closed
#2525 [PR #2149] [MERGED] remove versions older than 1.56
Closed
#2526 [PR #2150] [MERGED] use tsaddr library and cleanups
Closed
#2520 [PR #2138] [MERGED] update changelog for 0.23 release
Closed
#2521 [PR #2136] [MERGED] Exclude irrelevant files from mkdocs rendering
Closed
#2522 [PR #2143] [MERGED] Update flake.lock
Closed
#2523 [PR #2148] [MERGED] Add -it to docker exec
Closed
#2515 [PR #2127] [MERGED] move logic for validating node names
Closed
#2516 [PR #2132] [MERGED] Add compatibility with only websocket-capable clients
Closed
#2517 [PR #2131] [CLOSED] Fix nodes not getting set to offline when disconnects
Closed
#2518 [PR #2135] [MERGED] Update flake.lock
Closed
#2519 [PR #2134] [MERGED] Update headscale user creation settings in .deb
Closed
#2511 [PR #2122] [MERGED] Use headscale.example.com
Closed
#2512 [PR #2120] [CLOSED] changed the html string in the hscontrol/handlers.go file using go-elem
Closed
#2513 [PR #2125] [MERGED] make stream shutdown if self-node has been removed
Closed
#2514 [PR #2126] [MERGED] add shutdown that asserts if headscale had panics
Closed
#2509 [PR #2117] [MERGED] Update documentation for Apple
Closed
#2510 [PR #2124] [MERGED] make cli mode respect log.level
Closed
#2505 [PR #2112] [MERGED] Remove version and update setup instructions for Android
Closed
#2506 [PR #2113] [MERGED] Fix slow shutdown
Closed
#2507 [PR #2114] [MERGED] Simplify windows setup instructions
Closed
#2508 [PR #2116] [MERGED] dont override golangci go
Closed
#2500 [PR #2106] [MERGED] fix goreleaser warnings
Closed
#2501 [PR #2107] [MERGED] add no stalebot exception
Closed
#2502 [PR #2108] [CLOSED] add support for user-defined templates
Closed
#2503 [PR #2109] [MERGED] Only load needed part of configuration
Closed
#2504 [PR #2111] [MERGED] Update flake.lock
Closed
#2495 [PR #2100] [MERGED] Move flags after the command
Closed
#2496 [PR #2099] [CLOSED] Bump github.com/opencontainers/runc from 1.1.12 to 1.1.14
Closed
#2497 [PR #2102] [MERGED] Add support for service reload and sync service file
Closed
#2498 [PR #2104] [MERGED] Remove outdated proposals
Closed
#2499 [PR #2105] [MERGED] 2068 AutoApprovers tests
Closed
#2490 [PR #2093] [MERGED] Fix 764
Closed
#2491 [PR #2095] [MERGED] Fix typo in example config
Closed
#2492 [PR #2092] [MERGED] Use dns: as config key
Closed
#2493 [PR #2096] [MERGED] Update documentation for 0.23
Closed
#2494 [PR #2098] [MERGED] update godeps
Closed
#2485 [PR #2086] [MERGED] oldest client supported, not latest
Closed
#2486 [PR #2089] [MERGED] validate policy against nodes, error if not valid
Closed
#2487 [PR #2083] [MERGED] Fix FKs on sqllite migrations
Closed
#2488 [PR #2091] [MERGED] various doc updates in prep for 0.23
Closed
#2489 [PR #2088] [MERGED] Remove references to tests/acls from the documentation
Closed
#2483 [PR #2081] [MERGED] fix: correct a small spelling mistake
Closed
#2484 [PR #2077] [MERGED] upgrade go (1.23) and tailscale (1.72.1)
Closed
#2480 [PR #2076] [MERGED] fix route table migration wiping routes 0.22 -> 0.23
Closed
#2481 [PR #2078] [MERGED] Update flake.lock
Closed
#2482 [PR #2080] [MERGED] Fix self notification on expiry update via oidc relogin
Closed
#2475 [PR #2060] [MERGED] add coderabbit config
Closed
#2476 [PR #2066] [MERGED] Docs: Update ACLs on file formats
Closed
#2477 [PR #2069] [MERGED] chore: fix some comments
Closed
#2478 [PR #2075] [MERGED] fix warning errs from beta2
Closed
#2479 [PR #2071] [MERGED] Issue 2045, Feature Request
Closed
#2470 [PR #2054] [CLOSED] Linux installation documentation update
Closed
#2471 [PR #2057] [CLOSED] Don't overwrite previously filled dnsConfig.Domains
Closed
#2472 [PR #2058] [CLOSED] build docker images on PR
Closed
#2473 [PR #2053] [CLOSED] build docker images on PR
Closed
#2474 [PR #2059] [MERGED] Update flake.lock
Closed
#2465 [PR #2042] [MERGED] Update flake.lock
Closed
#2466 [PR #2046] [MERGED] feat: support client verify for derp (add integration tests)
Closed
#2467 [PR #2049] [CLOSED] Bump github.com/docker/docker from 26.1.3+incompatible to 26.1.5+incompatible
Closed
#2468 [PR #2051] [MERGED] Fix command get policy works with relative policy path
Closed
#2469 [PR #2052] [MERGED] Update flake.lock
Closed
#2460 [PR #2035] [MERGED] Update flake.lock
Closed
#2461 [PR #2037] [CLOSED] Bump github.com/docker/docker from 26.1.3+incompatible to 26.1.4+incompatible
Closed
#2462 [PR #2038] [MERGED] Add -race Flag to GitHub Action and Fix Data Race in CreateTailscaleNodesInUser
Closed
#2463 [PR #2040] [MERGED] Integrate GORM Logger with Zerolog and Add Configuration Options for Logging and Performance
Closed
#2464 [PR #2041] [MERGED] make acl_policy_path fatal if policy.path is not set
Closed
#2457 [PR #2022] [MERGED] config-example.yaml: Remove reference to yaml for policy files
Closed
#2458 [PR #2030] [MERGED] test embedded derp with derp updater, check client health
Closed
#2459 [PR #2034] [MERGED] Redo DNS configuration
Closed
#2453 [PR #2019] [MERGED] reformat code
Closed
#2454 [PR #2020] [MERGED] Redo OIDC configuration
Closed
#2455 [PR #2021] [MERGED] Update flake.lock
Closed
#2456 [PR #2023] [MERGED] Fix data race issues in EphemeralGarbageCollector tests
Closed
#2449 [PR #2014] [MERGED] move userprofiles into method on user struct
Closed
#2450 [PR #2018] [MERGED] actually lint file on CI
Closed
#2451 [PR #2017] [MERGED] small cleanups
Closed
#2452 [PR #2015] [MERGED] remove custom contains funcs for slices.Contains
Closed
#2445 [PR #2010] [MERGED] Add gofumpt to dev dependencies
Closed
#2446 [PR #2011] [MERGED] Update flake.lock
Closed
#2447 [PR #2013] [MERGED] fix(1996): Implement register method enum converter
Closed
#2448 [PR #2009] [MERGED] Remove deprecated linters from golangci-lint
Closed
#2440 [PR #1998] [CLOSED] Add Discord Support
Closed
#2441 [PR #2000] [MERGED] Update flake.lock
Closed
#2442 [PR #2003] [CLOSED] Bump google.golang.org/grpc from 1.64.0 to 1.64.1
Closed
#2443 [PR #2005] [MERGED] chore: configure some actions to be skipped for forks
Closed
#2444 [PR #2008] [MERGED] replace ephemeral deletion logic
Closed
#2435 [PR #1989] [MERGED] Remove allocations of lists before use
Closed
#2436 [PR #1991] [MERGED] Update flake.lock
Closed
#2437 [PR #1994] [CLOSED] Properly render ACL in documentation
Closed
#2438 [PR #1995] [CLOSED] chore: updated windows client docs
Closed
#2439 [PR #1997] [CLOSED] adding oidc desired username as option in config
Closed
#2432 [PR #1986] [MERGED] Update reverse-proxy.md
Closed
#2433 [PR #1985] [MERGED] Make write-ahead-log default and configurable for sqlite
Closed
#2434 [PR #1987] [MERGED] fix search domains and remove username from magicdns
Closed
#2429 [PR #1976] [MERGED] Fix Android docs
Closed
#2430 [PR #1979] [MERGED] Update flake.lock
Closed
#2431 [PR #1981] [CLOSED] feat: oidc profile picture and display name
Closed
#2425 [PR #1970] [CLOSED] fix the problem of systemctl stop headscale is very slow
Closed
#2426 [PR #1971] [CLOSED] fix the problem of systemctl stop headscale is very slow
Closed
#2427 [PR #1975] [MERGED] Make registration screen easier to use
Closed
#2428 [PR #1972] [CLOSED] feat: HTML template to register a node
Closed
#2420 [PR #1957] [CLOSED] feat: support client verify for derp
Closed
#2421 [PR #1958] [MERGED] Update flake.lock
Closed
#2422 [PR #1960] [MERGED] fixed typo and path
Closed
#2423 [PR #1965] [CLOSED] imporve documentation development
Closed
#2424 [PR #1959] [MERGED] remove last_successful_update error check
Closed
#2415 [PR #1949] [CLOSED] add download page
Closed
#2416 [PR #1948] [MERGED] update tailscale go dep
Closed
#2417 [PR #1950] [MERGED] move debug image to distroless
Closed
#2418 [PR #1947] [MERGED] Bump github.com/docker/docker from 25.0.3+incompatible to 25.0.5+incompatible
Closed
#2419 [PR #1952] [MERGED] Update flake.lock
Closed
#2412 [PR #1941] [CLOSED] Include ca-certificates in Dockerfile.debug
Closed
#2413 [PR #1945] [MERGED] Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3
Closed
#2414 [PR #1946] [MERGED] Bump github.com/jackc/pgx/v5 from 5.5.3 to 5.5.4
Closed
#2410 [PR #1943] [MERGED] Bump golang.org/x/net from 0.22.0 to 0.23.0
Closed
#2411 [PR #1944] [MERGED] Bump google.golang.org/protobuf from 1.32.0 to 1.33.0
Closed
#2404 [PR #1927] [MERGED] [DOCS] Make linux installation instructions more clear
Closed
#2405 [PR #1934] [CLOSED] re-construct OIDC config and flatten keycloak groups
Closed
#2406 [PR #1933] [CLOSED] Document Headscale web ui
Closed
#2407 [PR #1937] [CLOSED] Added api endpoint for get getting ACL info (groups and tagOwners)
Closed
#2408 [PR #1938] [CLOSED] Added HostInfo output to Node response
Closed
#2409 [PR #1939] [MERGED] Initialize log config earlier to prevent trace messages being printed early on
Closed
#2400 [PR #1920] [MERGED] fix preauth key logging in as previous user
Closed
#2401 [PR #1922] [MERGED] trace log and notifier shutdown
Closed
#2402 [PR #1924] [MERGED] ensure expire routines are cleaned up
Closed
#2403 [PR #1931] [MERGED] Simplify map session management
Closed
#2397 [PR #1915] [MERGED] low priority PR - Update OpenBSD installation docs for 2024
Closed
#2398 [PR #1919] [MERGED] fix issue preveting get node when disco is missing
Closed
#2399 [PR #1918] [MERGED] error if no prefix is configured
Closed
#2393 [PR #1912] [MERGED] Do not access node ID when node is not found
Closed
#2394 [PR #1909] [MERGED] replace issue templates with github issue forms
Closed
#2395 [PR #1914] [CLOSED] fix issue #1817
Closed
#2396 [PR #1917] [MERGED] add autogroup:internet, fix reduce filter rules
Closed
#2390 [PR #1907] [MERGED] Add contributing document
Closed
#2391 [PR #1908] [MERGED] Clarify relation with Tailscale
Closed
#2392 [PR #1906] [MERGED] remove examples/, and kustomize
Closed
#2385 [PR #1901] [MERGED] chore: use errors.New to replace fmt.Errorf with no parameters will much better.
Closed
#2386 [PR #1903] [MERGED] remove multistep build, build go last, allowing cached build layers (for debug image)
Closed
#2387 [PR #1902] [MERGED] Move pprof handler to metrics endpoint
Closed
#2388 [PR #1904] [CLOSED] try to close on existing connection, also reject
Closed
#2389 [PR #1905] [MERGED] batch updates in notifier
Closed
#2380 [PR #1897] [MERGED] Update flake.lock
Closed
#2381 [PR #1895] [MERGED] metrics, tuning in tests, db cleanups, fix concurrency issue
Closed
#2382 [PR #1898] [CLOSED] docs(README): update contributors
Closed
#2383 [PR #1899] [MERGED] fix prettier
Closed
#2384 [PR #1900] [CLOSED] docs(README): update contributors
Closed
#2375 [PR #1890] [MERGED] Allow to remove forced tags of a node
Closed
#2376 [PR #1891] [CLOSED] docs(README): update contributors
Closed
#2377 [PR #1893] [MERGED] Add test stage to docs
Closed
#2378 [PR #1892] [MERGED] Add the headscale-admin UI to the docs
Closed
#2379 [PR #1894] [CLOSED] docs(README): update contributors
Closed
#2371 [PR #1887] [CLOSED] docs(web-ui) Add Headscale Admin in web-ui
Closed
#2372 [PR #1884] [CLOSED] docs(README): update contributors
Closed
#2373 [PR #1888] [CLOSED] docs(README): update contributors
Closed
#2374 [PR #1889] [MERGED] docs(readme): change contributors section
Closed
#2368 [PR #1880] [CLOSED] docs(README): update contributors
Closed
#2369 [PR #1882] [MERGED] Fix crash when a prefix family was empty
Closed
#2370 [PR #1886] [MERGED] Remove unused node check interval
Closed
#2365 [PR #1877] [MERGED] Log available update as warning
Closed
#2366 [PR #1878] [MERGED] fix ip migration
Closed
#2367 [PR #1881] [CLOSED] docs(README): update contributors
Closed
#2360 [PR #1871] [CLOSED] docs(README): update contributors
Closed
#2361 [PR #1872] [MERGED] move "embedded derp" settings into With options for integration tests
Closed
#2362 [PR #1875] [CLOSED] docs(README): update contributors
Closed
#2363 [PR #1874] [CLOSED] docs(README): update contributors
Closed
#2364 [PR #1876] [CLOSED] docs(README): update contributors
Closed
#2355 [PR #1865] [CLOSED] docs(README): update contributors
Closed
#2356 [PR #1866] [MERGED] chore: fix function names in comment
Closed
#2357 [PR #1867] [CLOSED] docs(README): update contributors
Closed
#2358 [PR #1870] [CLOSED] feat: add config to overwrite grpc certificate
Closed
#2359 [PR #1869] [MERGED] Migrate IP fields in database to dedicated columns
Closed
#2350 [PR #1853] [MERGED] Use newer fork of termcolor
Closed
#2351 [PR #1854] [MERGED] docs: Add FAQ question about using the same machine as server and client
Closed
#2352 [PR #1858] [CLOSED] Add google workspace OIDC group support
Closed
#2353 [PR #1860] [MERGED] Fix typos
Closed
#2354 [PR #1864] [MERGED] Updated dependencies, fixing segfault for OpenBSD
Closed
#2346 [PR #1845] [CLOSED] docs(README): update contributors
Closed
#2347 [PR #1846] [CLOSED] docs(README): update contributors
Closed
#2348 [PR #1847] [CLOSED] docs(README): update contributors
Closed
#2349 [PR #1848] [MERGED] Update flake.lock
Closed
#2342 [PR #1839] [CLOSED] docs(README): update contributors
Closed
#2343 [PR #1833] [MERGED] Update flake.lock
Closed
#2344 [PR #1843] [MERGED] Downgrade update sent to debug
Closed
#2345 [PR #1844] [CLOSED] docs(README): update contributors
Closed
#2339 [PR #1830] [CLOSED] docs(README): update contributors
Closed
#2340 [PR #1832] [MERGED] update docs workflow
Closed
#2341 [PR #1834] [MERGED] docs(README): update contributors
Closed
#2334 [PR #1819] [CLOSED] docs(README): update contributors
Closed
#2335 [PR #1820] [CLOSED] feat: Support SSH session recording configuration
Closed
#2336 [PR #1823] [MERGED] feat: derpmap field in config
Closed
#2337 [PR #1826] [CLOSED] docs(README): update contributors
Closed
#2338 [PR #1829] [CLOSED] docs(README): update contributors
Closed
#2330 [PR #1809] [MERGED] update gh workflow actions
Closed
#2331 [PR #1808] [CLOSED] docs(README): update contributors
Closed
#2332 [PR #1812] [CLOSED] add PKCE verifier for OIDC
Closed
#2333 [PR #1815] [CLOSED] Defaults to deny all rather than accept all if no acl policy defined
Closed
#2325 [PR #1801] [CLOSED] fix: keep the update channel from being cleaned up
Closed
#2326 [PR #1802] [MERGED] fix postgres migration
Closed
#2327 [PR #1804] [CLOSED] docs(README): update contributors
Closed
#2328 [PR #1807] [MERGED] Ephemeral keys can now be reusable and non-reusable
Closed
#2329 [PR #1806] [CLOSED] docs(README): update contributors
Closed
#2320 [PR #1791] [MERGED] rework mapsession
Closed
#2321 [PR #1792] [MERGED] feat: implements apis for managing headscale policy
Closed
#2322 [PR #1794] [CLOSED] Update config-example.yaml for new db settings
Closed
#2323 [PR #1799] [MERGED] simplify integration testing with matrix jobs
Closed
#2324 [PR #1790] [MERGED] docs/reverse-proxy: use standard map, correct X-Forwarded-Proto varia…
Closed
#2317 [PR #1782] [CLOSED] docs(README): update contributors
Closed
#2318 [PR #1784] [CLOSED] docs(README): update contributors
Closed
#2319 [PR #1783] [MERGED] move debug inside if in docker goreleaser tag
Closed
#2312 [PR #1777] [CLOSED] docs(README): update contributors
Closed
#2313 [PR #1772] [CLOSED] docs(README): update contributors
Closed
#2314 [PR #1778] [CLOSED] docs(README): update contributors
Closed
#2315 [PR #1779] [CLOSED] docs(README): update contributors
Closed
#2316 [PR #1781] [MERGED] fix ifs in goreleaser gotemplate
Closed
#2311 [PR #1773] [MERGED] replace linter actions with nix to ensure consistent version
Closed
#2310 [PR #1771] [CLOSED] docs(README): update contributors
Closed
#2305 [PR #1765] [MERGED] improve errors for missing directories
Closed
#2306 [PR #1768] [CLOSED] Derp204 dockernetworking
Closed
#2307 [PR #1766] [MERGED] make database configuration change breaking
Closed
#2308 [PR #1769] [CLOSED] docs(README): update contributors
Closed
#2309 [PR #1770] [CLOSED] docs(README): update contributors
Closed
#2300 [PR #1756] [MERGED] new IP allocator and add postgres to integration tests.
Closed
#2301 [PR #1759] [CLOSED] fix docker tagging
Closed
#2302 [PR #1762] [MERGED] rollback gorm, broke migration #1755
Closed
#2303 [PR #1763] [MERGED] rework docker tags
Closed
#2304 [PR #1764] [CLOSED] docs(README): update contributors
Closed
#2295 [PR #1750] [CLOSED] docs(README): update contributors
Closed
#2296 [PR #1751] [MERGED] fix ko dockerhub builds
Closed
#2297 [PR #1752] [CLOSED] docs(README): update contributors
Closed
#2298 [PR #1754] [MERGED] drop unused last_successful_update field from node table
Closed
#2299 [PR #1753] [CLOSED] docs(README): update contributors
Closed
#2292 [PR #1745] [CLOSED] docs(README): update contributors
Closed
#2293 [PR #1749] [CLOSED] docs(README): update contributors
Closed
#2294 [PR #1746] [MERGED] Reduce poll logging to debug
Closed
#2289 [PR #1742] [MERGED] remove quotes from command
Closed
#2290 [PR #1743] [CLOSED] docs(README): update contributors
Closed
#2291 [PR #1744] [MERGED] login to docker registries
Closed
#2284 [PR #1734] [MERGED] Allow when user has only a subnet route
Closed
#2285 [PR #1738] [CLOSED] docs(README): update contributors
Closed
#2286 [PR #1739] [CLOSED] docs(README): update contributors
Closed
#2287 [PR #1740] [CLOSED] docs(README): update contributors
Closed
#2288 [PR #1741] [CLOSED] docs(README): update contributors
Closed
#2280 [PR #1732] [CLOSED] docs(README): update contributors
Closed
#2281 [PR #1733] [MERGED] TLS documentation updates
Closed
#2282 [PR #1736] [CLOSED] docs(README): update contributors
Closed
#2283 [PR #1737] [CLOSED] docs(README): update contributors
Closed
#2275 [PR #1727] [CLOSED] docs(README): update contributors
Closed
#2276 [PR #1729] [MERGED] Get integration test netmap from watch-ipn command
Closed
#2277 [PR #1728] [MERGED] Upgrade to Go 1.22 and update deps
Closed
#2278 [PR #1730] [MERGED] Prepare notify channel before sending first update
Closed
#2279 [PR #1731] [CLOSED] docs(README): update contributors
Closed
#2270 [PR #1719] [MERGED] Login with OIDC after having been logged out
Closed
#2271 [PR #1720] [CLOSED] docs(README): update contributors
Closed
#2272 [PR #1724] [CLOSED] docs(README): update contributors
Closed
#2273 [PR #1723] [MERGED] Add assert func for verifying status, netmap and netcheck
Closed
#2274 [PR #1726] [CLOSED] docs(README): update contributors
Closed
#2265 [PR #1702] [MERGED] ✨ feat(apikey): adds command to delete api keys
Closed
#2266 [PR #1707] [MERGED] Fix failover to disabled route #1706
Closed
#2267 [PR #1713] [CLOSED] fix: Preauth key list reusable column
Closed
#2268 [PR #1715] [CLOSED] docs(README): update contributors
Closed
#2269 [PR #1716] [MERGED] Build docker images with ko (goreleaser)
Closed
#2262 [PR #1699] [CLOSED] docs(README): update contributors
Closed
#2263 [PR #1700] [MERGED] Restructure database config
Closed
#2264 [PR #1701] [MERGED] Replace database locks with transactions
Closed
#2258 [PR #1694] [CLOSED] docs(README): update contributors
Closed
#2259 [PR #1695] [CLOSED] fix recusive rwmutex rlock which cause headscale deadlock
Closed
#2260 [PR #1697] [MERGED] Trim client secret after reading from file
Closed
#2261 [PR #1698] [CLOSED] docs/reverse-proxy: use standard map, correct X-Forwarded-Proto varia…
Closed
#2254 [PR #1689] [CLOSED] reorder node register command in html
Closed
#2255 [PR #1690] [CLOSED] docs(README): update contributors
Closed
#2256 [PR #1691] [CLOSED] docs(README): update contributors
Closed
#2257 [PR #1692] [MERGED] fix node expire error due to type in gorm model Update
Closed
#2250 [PR #1681] [MERGED] MagicDNS no longer requires nameservers
Closed
#2251 [PR #1682] [CLOSED] Update priavet key lines in config-example.yaml
Closed
#2252 [PR #1688] [CLOSED] docs(README): update contributors
Closed
#2253 [PR #1685] [CLOSED] WIP DB work
Closed
#2247 [PR #1671] [CLOSED] Bump tj-actions/changed-files from 14.1 to 41 in /.github/workflows
Closed
#2248 [PR #1676] [CLOSED] docs(README): update contributors
Closed
#2249 [PR #1677] [CLOSED] docs(README): update contributors
Closed
#2244 [PR #1670] [MERGED] ensure renabled auto-approve routes works
Closed
#2245 [PR #1672] [MERGED] Update bug_report.md
Closed
#2246 [PR #1673] [MERGED] node selfupdate and fix subnet router when ACL is enabled
Closed
#2240 [PR #1663] [MERGED] embed (hidden) tailsql for debugging
Closed
#2241 [PR #1668] [MERGED] Use result of fmt.Errorf call
Closed
#2242 [PR #1669] [MERGED] fix issue where advertise tags causes hang
Closed
#2243 [PR #1666] [MERGED] docs: Add docs for running headscale on sealos
Closed
#2235 [PR #1652] [MERGED] add 1.54 and 1.56 to integration tests
Closed
#2236 [PR #1657] [MERGED] Update flake.lock
Closed
#2237 [PR #1658] [MERGED] docs(windows-client): add Windows registry command
Closed
#2238 [PR #1659] [CLOSED] Running Headscale In A Container Documentation Updates.
Closed
#2239 [PR #1660] [CLOSED] Bump golang.org/x/crypto from 0.16.0 to 0.17.0
Closed
#2230 [PR #1642] [MERGED] fix hostinfo db column spelling
Closed
#2231 [PR #1646] [MERGED] make stale shorter
Closed
#2232 [PR #1644] [MERGED] add versioned migrations
Closed
#2233 [PR #1647] [MERGED] implement selfupdate and pass expiry
Closed
#2234 [PR #1649] [MERGED] document setting oidc client secret cia env
Closed
#2225 [PR #1632] [MERGED] Update flake.lock
Closed
#2226 [PR #1631] [CLOSED] docs(README): update contributors
Closed
#2227 [PR #1639] [MERGED] docs(README): update contributors
Closed
#2228 [PR #1640] [MERGED] turn off grpc communication logging
Closed
#2229 [PR #1641] [MERGED] add breaking entry of derp priv key
Closed
#2221 [PR #1626] [CLOSED] docs(README): update contributors
Closed
#2222 [PR #1627] [CLOSED] docs(README): update contributors
Closed
#2223 [PR #1630] [CLOSED] fix(db): sets max open and idle connections for postgres
Closed
#2224 [PR #1628] [MERGED] upgrade go dependencies
Closed
#2217 [PR #1620] [CLOSED] Do not overwrite the derpmap with default region
Closed
#2218 [PR #1621] [CLOSED] Docs: Add private key path to example config
Closed
#2219 [PR #1622] [MERGED] Fix Github Actions docs pipeline
Closed
#2220 [PR #1625] [CLOSED] docs(README): update contributors
Closed
#2213 [PR #1616] [CLOSED] use latest of changed-files ci plugin
Closed
#2214 [PR #1617] [CLOSED] Allow setting ForcedTags using the acls.hujson config file
Closed
#2215 [PR #1618] [MERGED] Docs: Update running-headscale-container.md - fix link to example config
Closed
#2216 [PR #1619] [CLOSED] docs(README): update contributors
Closed
#2207 [PR #1609] [MERGED] Use tailscale key types instead of strings
Closed
#2208 [PR #1611] [MERGED] Remove support for non-noise clients (pre-1.32)
Closed
#2209 [PR #1612] [MERGED] move to use tailscfg types over strings/custom types
Closed
#2210 [PR #1613] [CLOSED] docs(README): update contributors
Closed
#2211 [PR #1614] [CLOSED] Bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1
Closed
#2212 [PR #1615] [CLOSED] docs(README): update contributors
Closed
#2205 [PR #1606] [CLOSED] feat(route): allows conflicting subnet ranges across users
Closed
#2206 [PR #1610] [MERGED] Docs: fix path to nologin shell
Closed
#2200 [PR #1598] [MERGED] Update flake.lock
Closed
#2201 [PR #1597] [MERGED] Update xsync to v3.0.2
Closed
#2202 [PR #1605] [CLOSED] Fix #1601 - Group examples need group: prefix
Closed
#2203 [PR #1600] [CLOSED] Add DERP generate_204 endpoint for captive portal detection.
Closed
#2204 [PR #1603] [MERGED] remove the use key stripping and store the proper keys
Closed
#2196 [PR #1591] [CLOSED] docs(README): update contributors
Closed
#2198 [PR #1592] [MERGED] docs(README): update contributors
Closed
#2199 [PR #1594] [CLOSED] Add OIDC claim names options
Closed
#2193 [PR #1587] [MERGED] redundant line removed from systemd.service
Closed
#2194 [PR #1588] [MERGED] Add workflow to autoupdate flake.lock deps
Closed
#2195 [PR #1589] [MERGED] Update flake.lock
Closed
#2197 [PR #1590] [CLOSED] docs(README): update contributors
Closed
#2189 [PR #1580] [CLOSED] feat(derp): support verify-clients
Closed
#2190 [PR #1581] [CLOSED] Bump google.golang.org/grpc from 1.55.0 to 1.56.3
Closed
#2191 [PR #1583] [MERGED] ✨ feat: add pqsql configs for open and idle connections
Closed
#2192 [PR #1585] [CLOSED] Bump github.com/docker/docker from 24.0.4+incompatible to 24.0.7+incompatible
Closed
#2185 [PR #1565] [MERGED] Add Customization Options to DERP Map entry of integrated DERP server
Closed
#2186 [PR #1566] [MERGED] Enhance pipeline stability and automatically retry unstable tests
Closed
#2187 [PR #1573] [CLOSED] Bump golang.org/x/net from 0.14.0 to 0.17.0
Closed
#2188 [PR #1575] [MERGED] Fix/improve documentation formatting
Closed
#2180 [PR #1559] [MERGED] Add github stale action
Closed
#2181 [PR #1560] [MERGED] add note about db backup to changelog
Closed
#2182 [PR #1562] [MERGED] Restore foreign keys and add constraints
Closed
#2183 [PR #1563] [MERGED] Upgrade Go 1.21, Tailscale 1.50 and add Capability version support
Closed
#2184 [PR #1564] [MERGED] ensure online status and route changes are propagated
Closed
#2175 [PR #1554] [CLOSED] docs(README): update contributors
Closed
#2176 [PR #1555] [MERGED] Set online status in lite requests
Closed
#2177 [PR #1556] [MERGED] remove readonly case for mapresponse, dont think it is used
Closed
#2178 [PR #1557] [MERGED] add 0.23.0 changelog entry
Closed
#2179 [PR #1558] [MERGED] docs(README): update contributors
Closed
#2173 [PR #1551] [CLOSED] embed ui
Closed
#2174 [PR #1553] [MERGED] Rename Machine to Node
Closed
#2169 [PR #1544] [CLOSED] fix test fail keep user.Clients from concurrent map writes
Closed
#2170 [PR #1549] [CLOSED] docs(README): update contributors
Closed
#2171 [PR #1548] [CLOSED] Update iOS connect steps.
Closed
#2172 [PR #1546] [MERGED] Fix typo in docs - DB file path
Closed
#2165 [PR #1527] [CLOSED] Allow to get one route by route id
Closed
#2166 [PR #1528] [CLOSED] Enhancement: Enable Account Switching for Non-Ephemeral Devices on Logout
Closed
#2167 [PR #1535] [MERGED] Handle errors in integration test setups
Closed
#2168 [PR #1540] [CLOSED] docs(README): update contributors
Closed
#2160 [PR #1517] [CLOSED] Fix typo in example config
Closed
#2161 [PR #1518] [CLOSED] Update running-headscale-container.md
Closed
#2162 [PR #1521] [CLOSED] fix invalid discord channel links to instead reference server invite and name of channel
Closed
#2163 [PR #1524] [MERGED] Send logs to stderr, rather than stdout
Closed
#2164 [PR #1525] [CLOSED] docs(README): update contributors
Closed
#2156 [PR #1512] [CLOSED] docs(README): update contributors
Closed
#2157 [PR #1503] [CLOSED] docs(README): update contributors
Closed
#2158 [PR #1513] [CLOSED] [ASSIGN CUSTOM IP] optionally assign a custom ip when registering a m…
Closed
#2159 [PR #1515] [CLOSED] Custom machine address
Closed
#2152 [PR #1495] [MERGED] make some error logging more generic
Closed
#2153 [PR #1497] [MERGED] use nix caching and docker caching in CI
Closed
#2154 [PR #1499] [CLOSED] pin the version for docker cache github action
Closed
#2155 [PR #1502] [CLOSED] docs(README): update contributors
Closed
#2149 [PR #1492] [MERGED] Codereorg: Part 5, state
Closed
#2150 [PR #1493] [CLOSED] docs(README): update contributors
Closed
#2151 [PR #1498] [CLOSED] docs(README): update contributors
Closed
#2145 [PR #1487] [MERGED] Codereorg: Part 4, policy improvement
Closed
#2146 [PR #1489] [CLOSED] docs(README): update contributors
Closed
#2147 [PR #1490] [CLOSED] Allow setting ForcedTags using the acls.hujson config file
Closed
#2148 [PR #1491] [MERGED] use cmp.Diff instead of reflect.DeepEqual in tests
Closed
#2140 [PR #1480] [CLOSED] Fix hangs on SIGTERM.
Closed
#2141 [PR #1477] [MERGED] Code reorg part 3
Closed
#2142 [PR #1483] [CLOSED] Bugfix: when db_type is set to postgres, tailscale client will be hang up for a long time
Closed
#2143 [PR #1485] [CLOSED] docs(README): update contributors
Closed
#2144 [PR #1484] [MERGED] Adjust template for OIDC callback page (from #1435)
Closed
#2135 [PR #1465] [MERGED] Clean apt in dockerfile + prepare for 0.22.3
Closed
#2136 [PR #1466] [CLOSED] docs(README): update contributors
Closed
#2137 [PR #1474] [CLOSED] fix(sec): upgrade github.com/opencontainers/runc to
Closed
#2138 [PR #1470] [CLOSED] Fixing IPv6 Parsing in ACLs
Closed
#2139 [PR #1476] [MERGED] docs(README): update contributors
Closed
#2133 [PR #1463] [MERGED] Add ca-certificates
Closed
#2134 [PR #1458] [MERGED] code reorg part 2, the database
Closed
#2130 [PR #1454] [CLOSED] Update config-example.yaml
Closed
#2131 [PR #1460] [CLOSED] Add sync errorgroup handling in integration tests
Closed
#2132 [PR #1464] [CLOSED] docs(README): update contributors
Closed
#2125 [PR #1450] [MERGED] Docker image improvements
Closed
#2126 [PR #1448] [MERGED] Added web ui section
Closed
#2127 [PR #1452] [CLOSED] docs(README): update contributors
Closed
#2128 [PR #1451] [CLOSED] docs(README): update contributors
Closed
#2129 [PR #1453] [CLOSED] docs(README): update contributors
Closed
#2120 [PR #1443] [CLOSED] docs(README): update contributors
Closed
#2121 [PR #1444] [MERGED] Code reorg step 1
Closed
#2122 [PR #1446] [MERGED] Fix IP Address Order Bug
Closed
#2123 [PR #1445] [CLOSED] Change IP Address Order: IPv4 First
Closed
#2124 [PR #1447] [CLOSED] docs(README): update contributors
Closed
#2116 [PR #1439] [MERGED] Improved website
Closed
#2117 [PR #1440] [CLOSED] docs(README): update contributors
Closed
#2118 [PR #1441] [CLOSED] Missed the FAQ file
Closed
#2119 [PR #1442] [MERGED] Added missing file
Closed
#2112 [PR #1435] [CLOSED] feat: move OIDC callback page template to config
Closed
#2113 [PR #1437] [MERGED] update readme and templates to clarify scope
Closed
#2114 [PR #1434] [CLOSED] docs(README): update contributors
Closed
#2115 [PR #1438] [CLOSED] docs(README): update contributors
Closed
#2110 [PR #1430] [CLOSED] docs(README): update contributors
Closed
#2111 [PR #1431] [CLOSED] docs(README): update contributors
Closed
#2105 [PR #1425] [MERGED] Give a warning when users have set an unsupported prefix
Closed
#2106 [PR #1426] [MERGED] Add IP forwarding requirement to documentation
Closed
#2107 [PR #1427] [CLOSED] docs(README): update contributors
Closed
#2108 [PR #1428] [MERGED] Disable and Delete route must affect both exit routes (IPv4 and IPv6)
Closed
#2109 [PR #1429] [MERGED] Add further clarification on unsupported ranges in config example
Closed
#2100 [PR #1419] [CLOSED] docs(README): update contributors
Closed
#2101 [PR #1420] [MERGED] [docs] Use modern apt command to install package
Closed
#2102 [PR #1421] [MERGED] Update docker related doc
Closed
#2103 [PR #1422] [CLOSED] Support hosting headscale with an HTTP path prefix
Closed
#2104 [PR #1424] [CLOSED] Update embeded derp host to requested host
Closed
#2095 [PR #1412] [MERGED] Add missing GH releases page link
Closed
#2096 [PR #1414] [MERGED] Revert unix_socket to default value
Closed
#2097 [PR #1415] [CLOSED] docs(README): update contributors
Closed
#2098 [PR #1416] [CLOSED] docs(README): update contributors
Closed
#2099 [PR #1417] [MERGED] Revert and fix Unix socket location
Closed
#2090 [PR #1405] [CLOSED] feat: remove user if machine is tagged
Closed
#2091 [PR #1406] [CLOSED] Update the docker container doc
Closed
#2092 [PR #1408] [CLOSED] docs(README): update contributors
Closed
#2093 [PR #1404] [CLOSED] [In Queue] Rename Machine to Node
Closed
#2094 [PR #1410] [CLOSED] docs(README): update contributors
Closed
#2087 [PR #1400] [CLOSED] PR: Add a config to verify clients on DERP
Closed
#2088 [PR #1403] [MERGED] trim dockerfiles, script to rebuild test images
Closed
#2089 [PR #1401] [CLOSED] docs(README): update contributors
Closed
#2085 [PR #1398] [MERGED] Fix : Change master branch to main
Closed
#2086 [PR #1399] [CLOSED] docs(README): update contributors
Closed
#2080 [PR #1391] [MERGED] Move systemd service file to standard location
Closed
#2081 [PR #1394] [CLOSED] docs(README): update contributors
Closed
#2082 [PR #1395] [CLOSED] Fix: unable to start without bind mount
Closed
#2083 [PR #1396] [CLOSED] initial ssh reject work
Closed
#2084 [PR #1397] [MERGED] Fix : Updating the doc path
Closed
#2075 [PR #1381] [MERGED] ACL refactor
Closed
#2076 [PR #1382] [MERGED] Add go profiling flag, and enable on integration tests
Closed
#2077 [PR #1385] [CLOSED] docs(README): update contributors
Closed
#2078 [PR #1390] [CLOSED] Send peer deltas in MapResponse
Closed
#2079 [PR #1387] [CLOSED] Switch docker release to goreleaser
Closed
#2071 [PR #1377] [MERGED] optimize generateACLPeerCacheMap
Closed
#2072 [PR #1378] [CLOSED] docs(README): update contributors
Closed
#2073 [PR #1379] [MERGED] Improvements on Noise implementation
Closed
#2074 [PR #1380] [CLOSED] docs(README): update contributors
Closed
#2068 [PR #1374] [MERGED] Remove legacy DERP tests
Closed
#2069 [PR #1375] [CLOSED] docs(README): update contributors
Closed
#2070 [PR #1376] [MERGED] update flake hash
Closed
#2064 [PR #1363] [CLOSED] docs(README): update contributors
Closed
#2065 [PR #1365] [MERGED] Add more capabilities for systemd
Closed
#2066 [PR #1373] [CLOSED] docs(README): update contributors
Closed
#2067 [PR #1366] [CLOSED] docs(README): update contributors
Closed
#2060 [PR #1360] [MERGED] fix issue where binaries are not released
Closed
#2061 [PR #1358] [CLOSED] docs(README): update contributors
Closed
#2062 [PR #1361] [CLOSED] docs(README): update contributors
Closed
#2063 [PR #1362] [MERGED] Add version to binary release
Closed
#2055 [PR #1352] [MERGED] set release date in changelog
Closed
#2056 [PR #1353] [CLOSED] docs(README): update contributors
Closed
#2057 [PR #1354] [CLOSED] docs(README): update contributors
Closed
#2058 [PR #1355] [MERGED] release source code with vendored dependencies
Closed
#2059 [PR #1357] [CLOSED] docs(README): update contributors
Closed
#2052 [PR #1349] [MERGED] Packaging and doc fixups
Closed
#2053 [PR #1351] [CLOSED] docs(README): update contributors
Closed
#2054 [PR #1350] [MERGED] update changelog for #1339
Closed
#2048 [PR #1339] [MERGED] Fix IPv6 in ACLs
Closed
#2049 [PR #1343] [CLOSED] docs(README): update contributors
Closed
#2050 [PR #1346] [MERGED] Update flakes, add some quality of life improvements
Closed
#2051 [PR #1348] [CLOSED] refactor: Support any PostgreSQL database
Closed
#2045 [PR #1335] [MERGED] Make sure all clients of a user are ready
Closed
#2046 [PR #1336] [CLOSED] docs(README): update contributors
Closed
#2047 [PR #1338] [MERGED] Port embedded DERP integration tests to new model
Closed
#2040 [PR #1328] [MERGED] Added 1.38.4 in the new tests
Closed
#2041 [PR #1329] [CLOSED] docs(README): update contributors
Closed
#2042 [PR #1330] [MERGED] Fix binary releases
Closed
#2043 [PR #1332] [CLOSED] docs(README): update contributors
Closed
#2044 [PR #1333] [CLOSED] Add unix_socket directive to the "likely wanted changes" area
Closed
#2035 [PR #1322] [CLOSED] Bump github.com/docker/docker from 23.0.1+incompatible to 23.0.3+incompatible
Closed
#2036 [PR #1323] [MERGED] Target Go 1.20 and Tailscale 1.38
Closed
#2037 [PR #1324] [CLOSED] docs(README): update contributors
Closed
#2038 [PR #1325] [MERGED] docs(README): update contributors
Closed
#2039 [PR #1327] [CLOSED] docs(README): update contributors
Closed
#2032 [PR #1317] [MERGED] Fix CIDR calculation in expandACLPeerAddr
Closed
#2033 [PR #1321] [CLOSED] docs(README): update contributors
Closed
#2034 [PR #1318] [CLOSED] docs(README): update contributors
Closed
#2030 [PR #1315] [MERGED] Remove deprecated/broken linters
Closed
#2031 [PR #1316] [CLOSED] docs(README): update contributors
Closed
#2025 [PR #1299] [MERGED] Adding Powershell commands to Windows instructions
Closed
#2026 [PR #1304] [MERGED] Add tests to verify "Hosts" aliases in ACL
Closed
#2027 [PR #1311] [CLOSED] Bump to Go 1.20 and Tailscale 1.38
Closed
#2028 [PR #1308] [CLOSED] docs(README): update contributors
Closed
#2029 [PR #1314] [CLOSED] docs(README): update contributors
Closed
#2021 [PR #1293] [MERGED] Build static site with documentation
Closed
#2022 [PR #1297] [MERGED] Set up nFPM to build .deb and .rpm
Closed
#2023 [PR #1298] [CLOSED] Bump github.com/opencontainers/runc from 1.1.4 to 1.1.5
Closed
#2024 [PR #1296] [CLOSED] docs(README): update contributors
Closed
#2017 [PR #1289] [CLOSED] docs(README): update contributors
Closed
#2019 [PR #1290] [CLOSED] docs(README): update contributors
Closed
#2020 [PR #1291] [CLOSED] docs(README): update contributors
Closed
#2015 [PR #1286] [MERGED] Add SVG logos
Closed
#2016 [PR #1287] [CLOSED] Allow use of the preferred_username OIDC claim.
Closed
#2018 [PR #1288] [MERGED] ACL Doc's
Closed
#2010 [PR #1273] [CLOSED] docs(README): update contributors
Closed
#2011 [PR #1278] [MERGED] updated to ACL doc
Closed
#2012 [PR #1279] [MERGED] Fix issue where ACL * would filter out returning connections
Closed
#2013 [PR #1280] [CLOSED] Bump tailscale.com from 1.36.2 to 1.38.2
Closed
#2014 [PR #1281] [MERGED] Do not use yaml.v2 and yaml.v3 as direct dependency
Closed
#2007 [PR #1268] [CLOSED] Added headscale-ui to list of control panels
Closed
#2008 [PR #1270] [CLOSED] docs(README): update contributors
Closed
#2009 [PR #1272] [MERGED] Add missing entry to changelog
Closed
#2005 [PR #1267] [CLOSED] docs(README): update contributors
Closed
#2006 [PR #1269] [CLOSED] docs(README): update contributors
Closed
#2000 [PR #1262] [MERGED] docs(README): update contributors
Closed
#2001 [PR #1263] [MERGED] document running exit nodes
Closed
#2002 [PR #1265] [CLOSED] chore(README): Announce that iOS is now supported
Closed
#2003 [PR #1264] [MERGED] Update iOS compatibility and added iOS docs
Closed
#2004 [PR #1266] [CLOSED] docs(README): update contributors
Closed
#1996 [PR #1255] [CLOSED] docs(README): update contributors
Closed
#1997 [PR #1261] [MERGED] Add instructions on how to login to iOS
Closed
#1998 [PR #1256] [MERGED] adding some sleep on re-registration after machine expired
Closed
#1999 [PR #1258] [MERGED] Add ACL test for limiting a single port.
Closed
#1995 [PR #1254] [MERGED] MapResponse optimalisations, peer list integration tests
Closed
#1990 [PR #1249] [CLOSED] docs(README): update contributors
Closed
#1991 [PR #1250] [CLOSED] docs(README): update contributors
Closed
#1992 [PR #1251] [CLOSED] docs(README): update contributors
Closed
#1993 [PR #1252] [CLOSED] docs(README): update contributors
Closed
#1994 [PR #1253] [CLOSED] docs(README): update contributors
Closed
#1988 [PR #1246] [MERGED] changelog: prep for 0.21
Closed
#1989 [PR #1248] [CLOSED] docs(README): update contributors
Closed
#1985 [PR #1245] [MERGED] Fix various linting issues + golang-lint upgrade
Closed
#1986 [PR #1244] [MERGED] Allow to delete routes
Closed
#1987 [PR #1247] [CLOSED] docs(README): update contributors
Closed
#1980 [PR #1237] [CLOSED] docs(README): update contributors
Closed
#1981 [PR #1239] [CLOSED] Optimize getFilteredByACLPeers
Closed
#1982 [PR #1238] [CLOSED] docs(README): update contributors
Closed
#1983 [PR #1241] [MERGED] Post PR comment when nix vendor sum breaks
Closed
#1984 [PR #1243] [CLOSED] docs(README): update contributors
Closed
#1975 [PR #1232] [MERGED] Update dependencies 20230226
Closed
#1976 [PR #1234] [CLOSED] docs(README): update contributors
Closed
#1977 [PR #1233] [MERGED] Update prettier action
Closed
#1978 [PR #1236] [MERGED] Target Tailscale 1.36
Closed
#1979 [PR #1235] [CLOSED] docs(README): update contributors
Closed
#1970 [PR #1226] [MERGED] Add Graphical Control Panels section to README
Closed
#1971 [PR #1224] [MERGED] github.com/gofrs/uuid/v5 is now go modules compatible, use it
Closed
#1972 [PR #1223] [MERGED] Add steps for Google OAuth for OIDC
Closed
#1973 [PR #1231] [CLOSED] docs(README): update contributors
Closed
#1974 [PR #1230] [MERGED] Add "configtest" CLI command.
Closed
#1969 [PR #1221] [CLOSED] Improve docs
Closed
#1964 [PR #1211] [MERGED] Add css to the /windows and /apple templates
Closed
#1965 [PR #1212] [CLOSED] docs(README): update contributors
Closed
#1966 [PR #1213] [CLOSED] docs(README): update contributors
Closed
#1967 [PR #1220] [CLOSED] Bump golang.org/x/net from 0.2.0 to 0.7.0
Closed
#1968 [PR #1218] [MERGED] Fix OpenBSD build docs
Closed
#1960 [PR #1208] [CLOSED] docs(README): update contributors
Closed
#1961 [PR #1201] [MERGED] Return 404 on unmatched routes
Closed
#1962 [PR #1207] [MERGED] Add list of talks to the readme
Closed
#1963 [PR #1210] [MERGED] Update running-headscale-linux.md
Closed
#1955 [PR #1196] [MERGED] Remove all tests before generating new ones
Closed
#1957 [PR #1198] [CLOSED] docs(README): update contributors
Closed
#1958 [PR #1199] [MERGED] Improve integration tests docs and godocs
Closed
#1959 [PR #1200] [CLOSED] docs(README): update contributors
Closed
#1951 [PR #1193] [CLOSED] docs(README): update contributors
Closed
#1953 [PR #1194] [CLOSED] docs(README): update contributors
Closed
#1954 [PR #1195] [MERGED] Various tailcfg type fixes, expiry hardening and integration test
Closed
#1956 [PR #1197] [CLOSED] docs(README): update contributors
Closed
#1950 [PR #1191] [MERGED] Set OpenID Connect Expiry
Closed
#1952 [PR #1192] [MERGED] Use ripgrep to find list of integration tests
Closed
#1945 [PR #1185] [MERGED] Rename IP specific function, add missing Host field test case
Closed
#1946 [PR #1187] [CLOSED] docs(README): update contributors
Closed
#1947 [PR #1186] [CLOSED] docs(README): update contributors
Closed
#1948 [PR #1188] [CLOSED] docs(README): update contributors
Closed
#1949 [PR #1190] [CLOSED] docs(README): update contributors
Closed
#1940 [PR #1180] [CLOSED] Do not show IsPrimary field as false in exit nodes
Closed
#1941 [PR #1181] [MERGED] Do not show IsPrimary field as false in exit nodes
Closed
#1942 [PR #1182] [CLOSED] docs(README): update contributors
Closed
#1943 [PR #1183] [MERGED] Cancel old builds if new commits appear
Closed
#1944 [PR #1184] [MERGED] Improve generated integration tests
Closed
#1935 [PR #1173] [CLOSED] docs(README): update contributors
Closed
#1936 [PR #1175] [CLOSED] docs(README): update contributors
Closed
#1937 [PR #1178] [CLOSED] docs(README): update contributors
Closed
#1938 [PR #1177] [MERGED] Updated changelog for v0.20.0
Closed
#1939 [PR #1179] [CLOSED] docs(README): update contributors
Closed
#1932 [PR #1170] [MERGED] Mark -n and --namespace as deprecated
Closed
#1933 [PR #1172] [CLOSED] docs(README): update contributors
Closed
#1934 [PR #1171] [MERGED] Migrate namespace_id to user_id column in machine and pak
Closed
#1929 [PR #1167] [MERGED] Target Tailscale 1.36.0
Closed
#1930 [PR #1168] [CLOSED] docs(README): update contributors
Closed
#1931 [PR #1169] [CLOSED] docs(README): update contributors
Closed
#1925 [PR #1162] [MERGED] Align behaviour of dns_config.restricted_nameservers to tailscale
Closed
#1926 [PR #1163] [MERGED] modify the test to reflect the changes on the webinterface
Closed
#1927 [PR #1165] [CLOSED] docs(README): update contributors
Closed
#1928 [PR #1164] [MERGED] Add hint for reverse proxying with Apache
Closed
#1920 [PR #1152] [CLOSED] docs(README): update contributors
Closed
#1921 [PR #1154] [CLOSED] docs(README): update contributors
Closed
#1922 [PR #1156] [CLOSED] docs(README): update contributors
Closed
#1923 [PR #1160] [CLOSED] Add note on Apache as unsupported reverse proxy
Closed
#1924 [PR #1159] [MERGED] Enable both exit routes at the same time
Closed
#1915 [PR #1148] [MERGED] gorm: put Where before Find
Closed
#1916 [PR #1147] [MERGED] Migrate DB: rename table is plural
Closed
#1917 [PR #1149] [CLOSED] docs(README): update contributors
Closed
#1918 [PR #1151] [MERGED] permalink in the limitations section to tailscale
Closed
#1919 [PR #1150] [MERGED] Update the node join instruction to reference "username"
Closed
#1912 [PR #1146] [CLOSED] docs(README): update contributors
Closed
#1913 [PR #1145] [CLOSED] gorm: put Where before Find
Closed
#1914 [PR #1144] [MERGED] Rename [Nn]amespace -> [Uu]ser
Closed
#1910 [PR #1140] [CLOSED] docs(README): update contributors
Closed
#1911 [PR #1139] [CLOSED] docs(README): update contributors
Closed
#1906 [PR #1135] [MERGED] update ip_prefixes docs
Closed
#1907 [PR #1136] [CLOSED] docs(README): update contributors
Closed
#1908 [PR #1138] [MERGED] Makefile: remove a missing target
Closed
#1909 [PR #1137] [CLOSED] docs(README): update contributors
Closed
#1904 [PR #1132] [CLOSED] docs(README): update contributors
Closed
#1905 [PR #1133] [MERGED] Refresh machines with correct new expiry
Closed
#1902 [PR #1130] [CLOSED] docs(README): update contributors
Closed
#1903 [PR #1131] [MERGED] Added entry for performance improvements in ACLs
Closed
#1896 [PR #1122] [MERGED] Limit run regex for generated workflows
Closed
#1897 [PR #1123] [CLOSED] docs(README): update contributors
Closed
#1898 [PR #1124] [CLOSED] docs(README): update contributors
Closed
#1899 [PR #1127] [MERGED] oidc: allow reading the client secret from a file
Closed
#1900 [PR #1129] [MERGED] Repeat ToStringSlice
Closed
#1901 [PR #1128] [MERGED] Fix SIGSEGV crash related to map of state changes
Closed
#1894 [PR #1119] [MERGED] Split integration tests in separate gh actions workflows
Closed
#1895 [PR #1120] [CLOSED] docs(README): update contributors
Closed
#1888 [PR #1113] [CLOSED] docs(README): update contributors
Closed
#1889 [PR #1111] [CLOSED] docs(README): update contributors
Closed
#1890 [PR #1117] [MERGED] Read integration test config from Env
Closed
#1891 [PR #1115] [CLOSED] docs(README): update contributors
Closed
#1892 [PR #1116] [CLOSED] Repeat ToStringSlice
Closed
#1893 [PR #1118] [CLOSED] docs(README): update contributors
Closed
#1886 [PR #1109] [CLOSED] docs(README): update contributors
Closed
#1887 [PR #1110] [MERGED] Fix excessive cpu usage
Closed
#1885 [PR #1108] [MERGED] Remove Tailscale v1.18.2 from test matrix
Closed
#1880 [PR #1103] [CLOSED] docs(README): update contributors
Closed
#1881 [PR #1105] [CLOSED] docs(README): update contributors
Closed
#1882 [PR #1106] [CLOSED] docs(README): update contributors
Closed
#1883 [PR #1107] [MERGED] use smallzstd and sync pool
Closed
#1884 [PR #1104] [MERGED] Fix exit nodes funcionality
Closed
#1875 [PR #1096] [MERGED] templates: fix typo "custm" -> "custom"
Closed
#1876 [PR #1098] [MERGED] Remove ephemeral on logout
Closed
#1877 [PR #1097] [CLOSED] docs(README): update contributors
Closed
#1878 [PR #1102] [MERGED] Add Caddy instructions to reverse_proxy.md
Closed
#1879 [PR #1101] [MERGED] domains/restricted_nameservers: check dnsConfig.Resolvers instead
Closed
#1872 [PR #1094] [CLOSED] docs(README): update contributors
Closed
#1873 [PR #1090] [CLOSED] docs(README): update contributors
Closed
#1874 [PR #1095] [CLOSED] docs(README): update contributors
Closed
#1868 [PR #1089] [MERGED] Add ko-fi sponsor button
Closed
#1869 [PR #1088] [MERGED] Add integration tests for logout and login using auth keys
Closed
#1870 [PR #1091] [CLOSED] docs(README): update contributors
Closed
#1871 [PR #1093] [MERGED] fix goroutine leak
Closed
#1864 [PR #1081] [CLOSED] docs(README): update contributors
Closed
#1865 [PR #1082] [MERGED] Add logout method to Tailscale interface
Closed
#1866 [PR #1086] [MERGED] update macos check template
Closed
#1867 [PR #1083] [CLOSED] docs(README): update contributors
Closed
#1860 [PR #1077] [CLOSED] docs(README): update contributors
Closed
#1861 [PR #1078] [MERGED] Minor linting fixes
Closed
#1862 [PR #1079] [CLOSED] docs(README): update contributors
Closed
#1863 [PR #1080] [CLOSED] Machinekey in noise rebase
Closed
#1856 [PR #1071] [MERGED] Show clients offline when expired
Closed
#1857 [PR #1070] [MERGED] Update remote-cli.md
Closed
#1858 [PR #1074] [CLOSED] docs(README): update contributors
Closed
#1859 [PR #1076] [MERGED] fix(routes): ensure routes are correctly propagated
Closed
#1853 [PR #1066] [CLOSED] Remove outdated windows client doc
Closed
#1854 [PR #1068] [CLOSED] Add test to reproduce #1050
Closed
#1855 [PR #1069] [CLOSED] ACL testing playground
Closed
#1850 [PR #1064] [MERGED] dont fail docker if nothing to delete
Closed
#1851 [PR #1065] [MERGED] upgrade grpc-gateway plugin
Closed
#1852 [PR #1067] [MERGED] OIDC: Expire machines/nodes after token expiry
Closed
#1845 [PR #1053] docs(README): update contributors
Closed
#1846 [PR #1057] [MERGED] Disable Tailscale 1.16 in integration tests
Closed
#1847 [PR #1058] [MERGED] Fix duplicate nodes due to incorrect implementation of the protocol
Closed
#1848 [PR #1062] [MERGED] Report if a machine is online in CLI more accurately
Closed
#1849 [PR #1061] [CLOSED] Added info about custom URL feature break.
Closed
#1840 [PR #1047] [CLOSED] docs(README): update contributors
Closed
#1841 [PR #1048] [MERGED] docs(README): update contributors
Closed
#1842 [PR #1049] [MERGED] Murder docker container and network before run
Closed
#1843 [PR #1051] [CLOSED] docs(README): update contributors
Closed
#1844 [PR #1052] [MERGED] Set db_ssl to false by default, fixes #1043
Closed
#1836 [PR #1041] [MERGED] Added an OIDC AllowGroups option for authorization.
Closed
#1838 [PR #1046] [MERGED] Do not explicitly set the protocols when omitted in ACL
Closed
#1839 [PR #1042] [MERGED] Upgrade dependencies and streamline version use
Closed
#1835 [PR #1039] [CLOSED] docs(README): update contributors
Closed
#1837 [PR #1044] [CLOSED] docs(README): update contributors
Closed
#1830 [PR #1034] [CLOSED] docs(README): update contributors
Closed
#1831 [PR #1035] [MERGED] add the possibility for custom DNS records
Closed
#1832 [PR #1036] [MERGED] Make core ACL generation function not a Headscale method
Closed
#1833 [PR #1038] [MERGED] Added changelog for 0.17.1
Closed
#1834 [PR #1037] [CLOSED] docs(README): update contributors
Closed
#1825 [PR #1028] [MERGED] Correct typo on macOS standalone profile link
Closed
#1826 [PR #1031] [MERGED] Add breaking change about noise private path
Closed
#1827 [PR #1032] [CLOSED] docs(README): update contributors
Closed
#1828 [PR #1030] [MERGED] Ignore tparallel where it doesnt make sense
Closed
#1829 [PR #1033] [CLOSED] docs(README): update contributors
Closed
#1820 [PR #1020] [CLOSED] docs(README): update contributors
Closed
#1821 [PR #1019] [MERGED] Mark some changes as more important
Closed
#1822 [PR #1022] [CLOSED] Fix linting issues warning incorrect t.Parallel() calls in tests
Closed
#1823 [PR #1023] [CLOSED] Add nolint for t.parallel
Closed
#1824 [PR #1024] [MERGED] Refactor routing code and add support for subnet failover (HA)
Closed
#1817 [PR #1016] [MERGED] Update platform doc with Fast User Switching
Closed
#1818 [PR #1018] [CLOSED] docs(README): update contributors
Closed
#1819 [PR #1017] [CLOSED] Refactor subnet router code and add support for subnet failover (HA)
Closed
#1814 [PR #1009] [CLOSED] docs(README): update contributors
Closed
#1815 [PR #1013] [MERGED] docs(README): update contributors
Closed
#1816 [PR #1015] [CLOSED] docs(README): update contributors
Closed
#1810 [PR #1005] [MERGED] Mark all new integration tests to run in parallel
Closed
#1811 [PR #1004] [CLOSED] docs(README): update contributors
Closed
#1812 [PR #1006] [CLOSED] docs(README): update contributors
Closed
#1813 [PR #1008] [MERGED] Make displayName include basedomain if set
Closed
#1805 [PR #999] [CLOSED] docs(README): update contributors
Closed
#1806 [PR #998] [MERGED] Remove some very verbose error outputs
Closed
#1807 [PR #1001] [CLOSED] docs(README): update contributors
Closed
#1808 [PR #1002] [CLOSED] docs(README): update contributors
Closed
#1809 [PR #1003] [MERGED] Remove old OIDC integration tests
Closed
#1800 [PR #995] [MERGED] Remove broken renovatebot
Closed
#1801 [PR #992] [CLOSED] docs(README): update contributors
Closed
#1802 [PR #991] [CLOSED] docs(README): update contributors
Closed
#1803 [PR #996] [CLOSED] docs(README): update contributors
Closed
#1804 [PR #997] [CLOSED] docs(README): update contributors
Closed
#1799 [PR #988] [MERGED] Proposal: Better routing management
Closed
#1795 [PR #986] [CLOSED] docs(README): update contributors
Closed
#1796 [PR #987] [CLOSED] docs(README): update contributors
Closed
#1797 [PR #989] [MERGED] Increase integration tests timeout to 120m
Closed
#1798 [PR #990] [MERGED] Fix shell completion issues
Closed
#1790 [PR #981] [MERGED] Fix remote CLI when there is no config file present
Closed
#1791 [PR #982] [CLOSED] docs(README): update contributors
Closed
#1792 [PR #983] [CLOSED] Add Random IP Assignment
Closed
#1793 [PR #984] [MERGED] Remove mTLS code
Closed
#1794 [PR #985] [MERGED] WaitForReady in web auth flow integration tests outside up goroutine
Closed
#1786 [PR #977] [MERGED] Release: tag every release with develop
Closed
#1787 [PR #978] [CLOSED] docs(README): update contributors
Closed
#1788 [PR #979] [MERGED] OIDC integration v2
Closed
#1789 [PR #980] [CLOSED] docs(README): update contributors
Closed
#1782 [PR #973] [CLOSED] docs(README): update contributors
Closed
#1783 [PR #974] [CLOSED] Bump meta action and always include latest
Closed
#1784 [PR #975] [MERGED] Make config example "local dev first"
Closed
#1785 [PR #976] [CLOSED] docs(README): update contributors
Closed
#1779 [PR #970] [CLOSED] docs(README): update contributors
Closed
#1780 [PR #971] [MERGED] Fix AuthURL on machine expiration when using OIDC
Closed
#1781 [PR #972] [MERGED] Correction in the sample config file
Closed
#1775 [PR #964] [MERGED] Move Tailscale old versions to TS2019 list
Closed
#1776 [PR #966] [CLOSED] docs(README): update contributors
Closed
#1777 [PR #969] [CLOSED] docs(README): update contributors
Closed
#1778 [PR #967] [CLOSED] Add enumeration missing in the ACL rule filter
Closed
#1770 [PR #959] [MERGED] Releases: use flavor to set the tag suffix
Closed
#1771 [PR #960] [MERGED] OIDC code cleanup and harmonize with regular web auth
Closed
#1772 [PR #961] [CLOSED] docs(README): update contributors
Closed
#1773 [PR #962] [MERGED] Remove Alpine Linux container
Closed
#1774 [PR #963] [CLOSED] docs(README): update contributors
Closed
#1765 [PR #954] [CLOSED] docs(README): update contributors
Closed
#1766 [PR #955] [MERGED] Extend TSIC integration interface for non-authkey logins
Closed
#1767 [PR #956] [CLOSED] docs(README): update contributors
Closed
#1768 [PR #957] [MERGED] Add Web auth integration tests (v2)
Closed
#1769 [PR #958] [CLOSED] docs(README): update contributors
Closed
#1761 [PR #949] [CLOSED] docs(README): update contributors
Closed
#1762 [PR #951] [MERGED] Fixed minor linting issues
Closed
#1763 [PR #953] [MERGED] Add WaitForReady in TSIC
Closed
#1764 [PR #952] [CLOSED] docs(README): update contributors
Closed
#1757 [PR #946] [MERGED] Fix noise mapResponse updates, Fixes #838
Closed
#1758 [PR #945] [MERGED] config-example.yaml: fix typos and improve english.
Closed
#1759 [PR #947] [CLOSED] docs(README): update contributors
Closed
#1760 [PR #948] [CLOSED] docs(README): update contributors
Closed
#1753 [PR #942] [CLOSED] Add host info to machine
Closed
#1754 [PR #936] [MERGED] docs(README): update contributors
Closed
#1755 [PR #943] [MERGED] Remove private key constant errors from NewHeadscale
Closed
#1756 [PR #944] [MERGED] Make TLS setup work automatically
Closed
#1750 [PR #934] [CLOSED] docs(README): update contributors
Closed
#1751 [PR #940] [MERGED] Add support for NextDNS resolver
Closed
#1752 [PR #937] [CLOSED] Integration tests: Port DERP, add TLS ability.
Closed
#1745 [PR #929] [CLOSED] Add auth web flow integration tests
Closed
#1746 [PR #930] [CLOSED] docs(README): update contributors
Closed
#1747 [PR #931] [MERGED] Fix bitrotted versions in gh ci
Closed
#1748 [PR #932] [CLOSED] docs(README): update contributors
Closed
#1749 [PR #933] [CLOSED] docs(README): update contributors
Closed
#1740 [PR #924] [CLOSED] docs(README): update contributors
Closed
#1741 [PR #923] [CLOSED] docs(README): update contributors
Closed
#1742 [PR #926] [MERGED] Use kradalby/selfhosted runner for integration tests v2
Closed
#1743 [PR #927] [MERGED] Make more sslmode available for postgresql connection (Fixes #925)
Closed
#1744 [PR #928] [MERGED] Add build flag to enable TS2019
Closed
#1735 [PR #915] [MERGED] feat: add information to the /apple page for the macOS standalone client user
Closed
#1736 [PR #918] [CLOSED] NodePublicKeyRegex fix for Windows
Closed
#1737 [PR #920] [MERGED] Give workflows better names
Closed
#1738 [PR #922] [CLOSED] docs(README): update contributors
Closed
#1739 [PR #921] [MERGED] Run more tests in parallel
Closed
#1732 [PR #911] [CLOSED] Registration bug
Closed
#1733 [PR #913] [MERGED] integration: add headscale configuration programatically
Closed
#1734 [PR #914] [MERGED] fix bug in #912
Closed
#1728 [PR #907] [CLOSED] docs(README): update contributors
Closed
#1729 [PR #908] [CLOSED] docs(README): update contributors
Closed
#1730 [PR #909] [CLOSED] docs(README): update contributors
Closed
#1731 [PR #910] [CLOSED] docs(README): update contributors
Closed
#1725 [PR #904] [CLOSED] docs(README): update contributors
Closed
#1726 [PR #905] [MERGED] Add support for "override local DNS"
Closed
#1727 [PR #906] [MERGED] Give user better feedback if headscale socket is unwritable
Closed
#1720 [PR #899] [MERGED] Remove ip_prefix, its been deprecated for a long time
Closed
#1721 [PR #900] [MERGED] Update dependencies
Closed
#1722 [PR #901] [CLOSED] docs(README): update contributors
Closed
#1723 [PR #902] [CLOSED] docs(README): update contributors
Closed
#1724 [PR #903] [CLOSED] docs(README): update contributors
Closed
#1715 [PR #895] [MERGED] Simplify code around latest state change map updates
Closed
#1716 [PR #893] [CLOSED] docs(README): update contributors
Closed
#1717 [PR #897] [MERGED] Remove v1 general integration tests
Closed
#1718 [PR #896] [MERGED] Update golines
Closed
#1719 [PR #898] [CLOSED] docs(README): update contributors
Closed
#1710 [PR #889] [MERGED] Integration v2: port resolve magicdns
Closed
#1711 [PR #890] [MERGED] Integration v2: initial CLI command work
Closed
#1712 [PR #888] [MERGED] docs(README): update contributors
Closed
#1713 [PR #891] [MERGED] Integration, remove retry
Closed
#1714 [PR #892] [MERGED] Remove verbose flag for v2 tests, increase timeout
Closed
#1708 [PR #881] [CLOSED] docs(README): update contributors
Closed
#1709 [PR #886] [CLOSED] docs(README): update contributors
Closed
#1707 [PR #880] [CLOSED] Add logging to file
Closed
#1705 [PR #884] [MERGED] Integration test v2, hostname ping test
Closed
#1706 [PR #887] [MERGED] Migrate taildrop test to v2
Closed
#1702 [PR #874] [MERGED] Fix issue 660
Closed
#1703 [PR #875] [MERGED] Unify code snippet comment location
Closed
#1701 [PR #871] [MERGED] Integration: make TailscaleClient interface
Closed
#1704 [PR #877] [CLOSED] docs(README): update contributors
Closed
#1700 [PR #873] [CLOSED] docs(README): update contributors
Closed
#1696 [PR #866] [CLOSED] docs(README): update contributors
Closed
#1697 [PR #868] [CLOSED] docs(README): update contributors
Closed
#1698 [PR #870] [CLOSED] docs(README): update contributors
Closed
#1699 [PR #869] [CLOSED] docs(README): update contributors
Closed
#1692 [PR #860] [CLOSED] docs(README): update contributors
Closed
#1693 [PR #863] [MERGED] Provide LoginName when registering with pre-auth key
Closed
#1694 [PR #862] [MERGED] Fix prefix length comparison bug in AutoApprovers route evaluation
Closed
#1695 [PR #865] [MERGED] Do not use build tags for running integration tests
Closed
#1690 [PR #858] [CLOSED] docs(README): update contributors
Closed
#1691 [PR #859] [MERGED] Add back head and unstable, ts 1.32.0
Closed
#1685 [PR #853] [MERGED] Fix the proposed noise private_key_path
Closed
#1686 [PR #854] [MERGED] Split integration tests into seperate jobs
Closed
#1687 [PR #855] [MERGED] Fix no arguments panic
Closed
#1688 [PR #856] [MERGED] Integration tests v2
Closed
#1689 [PR #857] [CLOSED] docs(README): update contributors
Closed
#1680 [PR #843] [MERGED] Fix spelling error
Closed
#1681 [PR #844] [MERGED] Run integration tests inside docker, dont depend on local platform
Closed
#1682 [PR #847] [MERGED] Add SSH ACL support
Closed
#1683 [PR #849] [CLOSED] Further sanitization changes
Closed
#1684 [PR #852] [MERGED] Update document about reverse-proxy
Closed
#1676 [PR #832] [CLOSED] docs(README): update contributors
Closed
#1677 [PR #837] [MERGED] Fix warning on OIDC initialisation success
Closed
#1678 [PR #834] [CLOSED] docs(README): update contributors
Closed
#1679 [PR #840] [MERGED] docs(README): update contributors
Closed
#1672 [PR #829] [MERGED] Add option to allow headscale to start if OIDC fails to initialise
Closed
#1673 [PR #831] [MERGED] Move lets enc listener into go routine
Closed
#1674 [PR #830] [MERGED] Nix update and format flake file
Closed
#1675 [PR #833] [CLOSED] docs(README): update contributors
Closed
#1668 [PR #823] [MERGED] Protect against user injection for registration CLI page
Closed
#1669 [PR #821] [CLOSED] docs(README): update contributors
Closed
#1670 [PR #824] [CLOSED] docs(README): update contributors
Closed
#1671 [PR #825] [CLOSED] docs(README): update contributors
Closed
#1665 [PR #818] [CLOSED] docs(README): update contributors
Closed
#1666 [PR #819] [CLOSED] docs(README): update contributors
Closed
#1667 [PR #820] [CLOSED] docs(README): update contributors
Closed
#1660 [PR #802] [CLOSED] Mysql support
Closed
#1661 [PR #812] [CLOSED] docs(README): update contributors
Closed
#1662 [PR #811] [MERGED] Fix subnet routers
Closed
#1663 [PR #815] [MERGED] Removed gin from go.sum (Github security notice)
Closed
#1664 [PR #816] [CLOSED] docs(README): update contributors
Closed
#1655 [PR #797] [MERGED] Remove --rm flag from Docker example
Closed
#1656 [PR #796] [CLOSED] docs(README): update contributors
Closed
#1657 [PR #795] [MERGED] Run buf mod update in protos/
Closed
#1658 [PR #801] [MERGED] Add integration tests for OIDC authentication
Closed
#1659 [PR #798] [CLOSED] docs(README): update contributors
Closed
#1650 [PR #790] [MERGED] Add reverse proxy documentation
Closed
#1651 [PR #789] [CLOSED] docs(README): update contributors
Closed
#1652 [PR #791] [MERGED] Add logo files and add to readme
Closed
#1653 [PR #793] [MERGED] Remove sponsor buttons
Closed
#1654 [PR #792] [CLOSED] docs(README): update contributors
Closed
#1645 [PR #784] [MERGED] Fix linting broken after Go 1.19
Closed
#1646 [PR #785] [CLOSED] docs(README): update contributors
Closed
#1647 [PR #786] [MERGED] Update dependencies 20220904
Closed
#1648 [PR #787] [CLOSED] docs(README): update contributors
Closed
#1649 [PR #788] [MERGED] Warn when Headscale is running behind an improperly configured proxy
Closed
#1640 [PR #781] [MERGED] Switch to Nix unstable for Go 1.19
Closed
#1641 [PR #780] [MERGED] Target Tailscale version to v1.30.0 (and replace inet.af/netaddr with net/netip)
Closed
#1642 [PR #779] [CLOSED] docs(README): update contributors
Closed
#1643 [PR #782] [CLOSED] docs(README): update contributors
Closed
#1644 [PR #783] [CLOSED] docs(README): update contributors
Closed
#1636 [PR #772] [MERGED] Add Tailscale v1.30.0 to the integration test roaster
Closed
#1637 [PR #773] [CLOSED] docs(README): update contributors
Closed
#1638 [PR #776] [CLOSED] Target Go 1.19 for Headscale
Closed
#1639 [PR #778] [MERGED] Target Go 1.19 for Headscale
Closed
#1632 [PR #768] [MERGED] toggle json logging via config
Closed
#1633 [PR #769] [CLOSED] Added comments
Closed
#1634 [PR #770] [CLOSED] Fixes #766 Feature optional hostname suffix
Closed
#1635 [PR #771] [MERGED] Random suffix only on hostname collision in namespace.
Closed
#1630 [PR #765] [CLOSED] bugfix: Added base key validity period of 60 minutes.
Closed
#1631 [PR #767] [MERGED] Add support for PreAuthKey tags/automatic tagging
Closed
#1625 [PR #757] [MERGED] Updated changelog for 0.16.4
Closed
#1626 [PR #759] [CLOSED] docs(README): update contributors
Closed
#1627 [PR #758] [CLOSED] docs(README): update contributors
Closed
#1628 [PR #760] [MERGED] docs(README): update contributors
Closed
#1629 [PR #763] [MERGED] Add support for autoApprovers ACL
Closed
#1620 [PR #753] [CLOSED] docs(README): update contributors
Closed
#1621 [PR #754] [MERGED] Fix cli registration of expired machines
Closed
#1622 [PR #752] [MERGED] Create CODE_OF_CONDUCT.md
Closed
#1623 [PR #755] [CLOSED] docs(README): update contributors
Closed
#1624 [PR #756] [MERGED] Env config
Closed
#1615 [PR #746] [MERGED] Fix charset typo in swagger.go
Closed
#1616 [PR #747] [MERGED] Fix error decoding OIDC claims (#744)
Closed
#1617 [PR #748] [CLOSED] docs(README): update contributors
Closed
#1618 [PR #750] [CLOSED] docs(README): update contributors
Closed
#1619 [PR #751] [CLOSED] docs(README): update contributors
Closed
#1610 [PR #738] [MERGED] Implement TS2021 protocol in headscale
Closed
#1611 [PR #739] [MERGED] Added changelog entries for 0.16.x
Closed
#1612 [PR #742] [CLOSED] docs(README): update contributors
Closed
#1613 [PR #743] [CLOSED] docs(proposals): add proposal for the ACL API
Closed
#1614 [PR #745] [MERGED] feat: add support for TLS with Postgres
Closed
#1606 [PR #735] [MERGED] Fix expired node registration URL
Closed
#1607 [PR #736] [MERGED] docs(README): update contributors
Closed
#1608 [PR #734] [MERGED] Add ability to connect to PostgreSQL via unix socket
Closed
#1609 [PR #737] [MERGED] Fixed another recurrence of MachineKey
Closed
#1603 [PR #729] [MERGED] Minor fix to linting issue introduced when fixing excludeCorrectlyTaggedNodes (#707)
Closed
#1604 [PR #730] [CLOSED] docs(README): update contributors
Closed
#1605 [PR #732] [CLOSED] docs(README): update contributors
Closed
#1599 [PR #722] [MERGED] Update dependencies versions
Closed
#1600 [PR #723] [CLOSED] docs(README): update contributors
Closed
#1601 [PR #725] [MERGED] Improve registration protocol implementation and switch to NodeKey as main identifier
Closed
#1602 [PR #728] [CLOSED] docs(README): update contributors
Closed
#1595 [PR #719] [CLOSED] docs(README): update contributors
Closed
#1596 [PR #718] [CLOSED] docs(README): update contributors
Closed
#1597 [PR #720] [MERGED] Replaced legacy ioutil usage
Closed
#1598 [PR #721] [CLOSED] docs(README): update contributors
Closed
#1590 [PR #712] [CLOSED] docs(README): update contributors
Closed
#1591 [PR #713] [MERGED] Update buf setup action for proto-lint
Closed
#1592 [PR #714] [CLOSED] docs(README): update contributors
Closed
#1593 [PR #715] [CLOSED] docs(README): update contributors
Closed
#1594 [PR #716] [CLOSED] docs(README): update contributors
Closed
#1585 [PR #708] [MERGED] Revert BuildKit (docker buildx) support
Closed
#1586 [PR #707] [MERGED] Fix bug in excludeCorrectlyTaggedNodes
Closed
#1587 [PR #709] [CLOSED] docs(README): update contributors
Closed
#1588 [PR #710] [MERGED] Improvements in integration tests
Closed
#1589 [PR #711] [MERGED] typo fixed from advertised to advertise
Closed
#1580 [PR #697] [CLOSED] docs(README): update contributors
Closed
#1581 [PR #698] [MERGED] Export API errors
Closed
#1582 [PR #700] [CLOSED] Temporary fix integration tests with dedicated Dockerfile
Closed
#1583 [PR #701] [CLOSED] Fix integration test issues due to multi-arch
Closed
#1584 [PR #703] [MERGED] Update the readme and documentation with details on the Android app
Closed
#1575 [PR #691] [CLOSED] docs(README): update contributors
Closed
#1576 [PR #692] [MERGED] Update runc dependencies to fix security notification
Closed
#1577 [PR #693] [CLOSED] docs(README): update contributors
Closed
#1578 [PR #694] [CLOSED] docs(README): update contributors
Closed
#1579 [PR #696] [CLOSED] docs(README): update contributors
Closed
#1574 [PR #689] [MERGED] Remove duplicate tags if sent by the client
Closed
#1573 [PR #687] [MERGED] more intuitive output of node ls
Closed
#1570 [PR #685] [MERGED] Decompose OIDCCallback method
Closed
#1571 [PR #686] [MERGED] docs(README): update contributors
Closed
#1572 [PR #688] [MERGED] Prepare changelog structure for 0.17.0
Closed
#1568 [PR #683] [MERGED] docs(README): update contributors
Closed
#1569 [PR #684] [MERGED] Fix API router
Closed
#1565 [PR #676] [MERGED] docs(README): update contributors
Closed
#1566 [PR #677] [MERGED] remove gin completely, ~2MB reduction on final binary
Closed
#1567 [PR #680] [MERGED] Topic/speedup build
Closed
#1560 [PR #666] [CLOSED] add flags for headscale serve to provide initial api key
Closed
#1561 [PR #667] [MERGED] Make integration tests retry on failure.
Closed
#1562 [PR #668] [MERGED] graceful shutdown fix
Closed
#1563 [PR #675] [MERGED] Make tailnet updates check interval configurable
Closed
#1564 [PR #670] [MERGED] ping db in health check
Closed
#1555 [PR #655] [CLOSED] docs(README): update contributors
Closed
#1556 [PR #656] [MERGED] Drop Gin as web framework for TS2019 API
Closed
#1557 [PR #658] [MERGED] Quick fix to segfault on CLI when Headscale is not running
Closed
#1558 [PR #664] [CLOSED] docs(README): update contributors
Closed
#1559 [PR #665] [MERGED] docs(README): update contributors
Closed
#1553 [PR #654] [MERGED] Add version info to binary in Docker container
Closed
#1554 [PR #651] [MERGED] add timeout for http shutdown, add db disconnect
Closed
#1550 [PR #645] [CLOSED] Implement TS2021
Closed
#1551 [PR #646] [MERGED] docs(README): update contributors
Closed
#1552 [PR #648] [MERGED] Send Online field of tailcfg.Node based on LastSeen
Closed
#1545 [PR #640] [CLOSED] docs(README): update contributors
Closed
#1546 [PR #641] [MERGED] docs(README): update contributors
Closed
#1547 [PR #639] [MERGED] Fix obtuse "ephemeral_node_inactivity_timeout" error
Closed
#1548 [PR #642] [MERGED] Ignore new dump file
Closed
#1549 [PR #643] [MERGED] Fix occasional panic on registration
Closed
#1542 [PR #633] [CLOSED] docs(README): update contributors
Closed
#1543 [PR #637] [CLOSED] docs(README): update contributors
Closed
#1544 [PR #638] [MERGED] Simplify DERP maps update function
Closed
#1539 [PR #631] [CLOSED] docs(README): update contributors
Closed
#1540 [PR #632] [MERGED] docs(README): update contributors
Closed
#1541 [PR #636] [MERGED] fix issue 635
Closed
#1535 [PR #627] [CLOSED] docs(README): update contributors
Closed
#1536 [PR #628] [MERGED] Update all nodes after ACL has been reloaded with sighup
Closed
#1537 [PR #629] [CLOSED] docs(README): update contributors
Closed
#1538 [PR #630] [MERGED] Add 1.26 to tests
Closed
#1530 [PR #620] [CLOSED] Add bradfitz's iOS MDM hint to readme
Closed
#1531 [PR #621] [CLOSED] docs(README): update contributors
Closed
#1532 [PR #622] [CLOSED] namespaces are tailnets
Closed
#1533 [PR #624] [MERGED] Add ability to set randomizeClientPort
Closed
#1534 [PR #625] [CLOSED] docs(README): update contributors
Closed
#1525 [PR #613] [CLOSED] docs(README): update contributors
Closed
#1526 [PR #615] [MERGED] fix typo for GGO->CGO
Closed
#1527 [PR #618] [MERGED] Update ACL syntax and add support for protocol filtering
Closed
#1528 [PR #616] [MERGED] docs(README): update contributors
Closed
#1529 [PR #619] [MERGED] Use strings.Cut to simplify logic
Closed
#1521 [PR #610] [MERGED] some GOOS do not support pie build, detect in makefile and fall back to non-pie build
Closed
#1522 [PR #608] [MERGED] Cleanup the configuration loading
Closed
#1523 [PR #611] [MERGED] OpenBSD doc
Closed
#1524 [PR #612] [MERGED] Override config file via cli
Closed
#1517 [PR #605] [CLOSED] docs(README): update contributors
Closed
#1518 [PR #606] [CLOSED] docs(README): update contributors
Closed
#1519 [PR #607] [MERGED] docs(README): update contributors
Closed
#1520 [PR #609] [MERGED] Drop arm32 (armhf) for linux and add Darwin arm64
Closed
#1515 [PR #601] [MERGED] Allow ACLs to be reloaded with SIGHUP
Closed
#1516 [PR #602] [MERGED] Fix forced Tags with legitimate tagOwners
Closed
#1510 [PR #596] [MERGED] Allow headscale to enable/disable logtail
Closed
#1511 [PR #597] [MERGED] Check errors for Database calls
Closed
#1512 [PR #598] [MERGED] Use Prometheus duration parser
Closed
#1513 [PR #599] [MERGED] Update changelog for duration change
Closed
#1514 [PR #600] [CLOSED] Improve signal handling
Closed
#1507 [PR #593] [MERGED] docs(README): update contributors
Closed
#1508 [PR #594] [MERGED] docs(README): update contributors
Closed
#1509 [PR #595] [MERGED] docs(README): update contributors
Closed
#1503 [PR #590] [MERGED] typo
Closed
#1504 [PR #589] [CLOSED] Adding DataDog tracer
Closed
#1505 [PR #591] [MERGED] link fix
Closed
#1506 [PR #592] [CLOSED] docs(README): update contributors
Closed
#1500 [PR #585] [CLOSED] docs(README): update contributors
Closed
#1501 [PR #586] [CLOSED] docs(README): update contributors
Closed
#1502 [PR #587] [CLOSED] Cache nix and go deps
Closed
#1495 [PR #579] [CLOSED] Use env variable TZ to set timezone, fallback to UTC (updated)
Closed
#1496 [PR #580] [CLOSED] allow the user to see their node tags from cli using --show-tags
Closed
#1497 [PR #581] [CLOSED] added cli options to output ACLs
Closed
#1498 [PR #584] [CLOSED] docs(README): update contributors
Closed
#1499 [PR #583] [CLOSED] add command argument --show-routes to node list.
Closed
#1490 [PR #574] [MERGED] show ipv4 address first in node list
Closed
#1491 [PR #575] [CLOSED] docs(README): update contributors
Closed
#1492 [PR #578] [MERGED] Add --all (-a) flag to enable routes command (implements #360)
Closed
#1493 [PR #576] [MERGED] docs(README): update contributors
Closed
#1494 [PR #577] [CLOSED] Use env variable TZ to set timezone, fallback to UTC
Closed
#1485 [PR #566] [MERGED] Do not setLastStateChangeToNow every expireEphemeralNodesWorker call
Closed
#1486 [PR #568] [MERGED] Reduce the number of containers in integration tests
Closed
#1487 [PR #570] [MERGED] docs(README): update contributors
Closed
#1488 [PR #569] [MERGED] Command for moving nodes between namespaces
Closed
#1489 [PR #573] [MERGED] fixed typo
Closed
#1482 [PR #559] [MERGED] Upgrade dependencies and new tailscale
Closed
#1483 [PR #560] [MERGED] Rework hostname handling
Closed
#1484 [PR #565] [MERGED] Allow more configuration over the OIDC flow
Closed
#1480 [PR #557] [MERGED] remove necessary buf installation
Closed
#1481 [PR #558] [MERGED] Add command to force tags on nodes and list tags
Closed
#1473 [PR #548] [CLOSED] docs(README): update contributors
Closed
#1474 [PR #549] [CLOSED] docs(README): update contributors
Closed
#1475 [PR #553] [MERGED] Update discord link so it does not grant temp memberships
Closed
#1476 [PR #551] [MERGED] Clarified systemd friendly path
Closed
#1477 [PR #554] [CLOSED] docs(README): update contributors
Closed
#1478 [PR #555] [CLOSED] docs(README): update contributors
Closed
#1479 [PR #556] [MERGED] docs(README): update contributors
Closed
#1468 [PR #542] [MERGED] fixed the issue of sending on closed channel
Closed
#1469 [PR #541] [MERGED] docs(README): update contributors
Closed
#1470 [PR #547] [CLOSED] docs(README): update contributors
Closed
#1471 [PR #544] [MERGED] Makefile improvements
Closed
#1472 [PR #545] [MERGED] fix discord invite
Closed
#1462 [PR #529] [CLOSED] Implement TS2021 (Tailscale control protocol v2)
Closed
#1463 [PR #535] [CLOSED] docs(README): update contributors
Closed
#1464 [PR #537] [MERGED] Exit Headscale if ACL policy file cannot be parsed
Closed
#1465 [PR #538] [MERGED] Fix wrong metrics port in docs
Closed
#1466 [PR #540] [MERGED] Fix key name about derp port in derp-example.yml
Closed
#1467 [PR #539] [CLOSED] docs(README): update contributors
Closed
#1456 [PR #519] [MERGED] Fix labels cardinality error when registering unknown pre-auth key
Closed
#1457 [PR #517] [MERGED] Prepare CHANGELOG for v0.15.0
Closed
#1458 [PR #528] [MERGED] docs(README): update contributors
Closed
#1459 [PR #521] [MERGED] Docker docs enhancements
Closed
#1460 [PR #531] [MERGED] Suggest English as common language in GitHub interactions
Closed
#1461 [PR #534] [MERGED] fix: Remove days from expiry option value examples
Closed
#1450 [PR #511] [MERGED] fix(oidc): Reset expiry for reauthentication
Closed
#1451 [PR #512] [MERGED] feat(oidc): add debug log
Closed
#1452 [PR #513] [MERGED] Add Tailscale unstable channel and repo HEAD to integration tests
Closed
#1453 [PR #516] [CLOSED] docs(README): update contributors
Closed
#1454 [PR #514] [MERGED] fix: possible panic in Headscale.scheduledDERPMapUpdateWorker
Closed
#1455 [PR #518] [MERGED] docs(README): update contributors
Closed
#1445 [PR #501] [CLOSED] docs(README): update contributors
Closed
#1446 [PR #505] [MERGED] Fixed docs metrics default endpoint
Closed
#1447 [PR #507] [MERGED] docs(README): update contributors
Closed
#1448 [PR #509] [MERGED] Upgrade to Go 1.18
Closed
#1449 [PR #510] [MERGED] Docs: Improve ACLs documentation
Closed
#1440 [PR #495] [MERGED] Regression bug fix when re-authenticating machine with auth-key
Closed
#1441 [PR #498] [CLOSED] Machine rename support
Closed
#1442 [PR #496] [MERGED] docs(README): update contributors
Closed
#1443 [PR #499] [MERGED] Make STUN run by default when embedded DERP is enabled
Closed
#1444 [PR #500] [MERGED] Fix API access
Closed
#1435 [PR #488] [MERGED] docs(README): update contributors
Closed
#1436 [PR #490] [CLOSED] Ignore expired machine records - closes #489
Closed
#1437 [PR #487] [CLOSED] docs(README): update contributors
Closed
#1438 [PR #493] [CLOSED] Refresh expired machine on re-auth - closes #489
Closed
#1439 [PR #494] [CLOSED] Regression bug fix when re-authenticating machine with auth-key
Closed
#1434 [PR #486] [MERGED] Make register html template consistent with other endpoints
Closed
#1429 [PR #395] [CLOSED] fix(deps): update go modules
Closed
#1430 [PR #484] [MERGED] Fix checkboxes in PR template
Closed
#1431 [PR #483] [CLOSED] docs(README): update contributors
Closed
#1432 [PR #482] [MERGED] Add Nix reproducible build system
Closed
#1433 [PR #485] [CLOSED] docs(README): update contributors
Closed
#1423 [PR #389] [MERGED] docs: fix typo in ACME challenge type comment
Closed
#1424 [PR #391] [CLOSED] docs(README): update contributors
Closed
#1425 [PR #392] [MERGED] Add /windows endpoint for Windows configuration + /apple endpoint cleanup
Closed
#1426 [PR #393] [MERGED] docs(README): update contributors
Closed
#1427 [PR #394] [MERGED] chore(deps): update dependency docker.io/golang to v1.17.8
Closed
#1428 [PR #398] [CLOSED] docs(README): update contributors
Closed
#1417 [PR #380] [MERGED] docs(README): update contributors
Closed
#1418 [PR #382] [CLOSED] docs(README): update contributors
Closed
#1419 [PR #384] [MERGED] feat(acls): add some logs and skip error
Closed
#1420 [PR #387] [MERGED] Fix magic dns and uppercase letters
Closed
#1421 [PR #388] [MERGED] Add an embedded DERP server to Headscale
Closed
#1422 [PR #385] [CLOSED] docs(README): update contributors
Closed
#1411 [PR #375] [MERGED] Fix limitations in source acls rules
Closed
#1412 [PR #376] [MERGED] Add some shorthand aliases for commands+subcommands
Closed
#1413 [PR #377] [MERGED] Make contributor pipeline smarter
Closed
#1414 [PR #378] [CLOSED] docs(README): update contributors
Closed
#1415 [PR #381] [MERGED] docs(README): update contributors
Closed
#1416 [PR #379] [MERGED] Second contributor attempt
Closed
#1408 [PR #366] [MERGED] Registration simplification
Closed
#1409 [PR #371] [MERGED] Use specific types for Machine
Closed
#1410 [PR #373] [MERGED] feat(acls): normalize the group name
Closed
#1403 [PR #357] [MERGED] Remove boundaries between Namespaces
Closed
#1404 [PR #359] [MERGED] Add YAML support to ACLs
Closed
#1405 [PR #369] [MERGED] Update dependencies
Closed
#1406 [PR #368] [MERGED] Fix apple profile issue being generated with escaped characters
Closed
#1407 [PR #370] [CLOSED] Fix could not create namespace OIDC
Closed
#1398 [PR #350] [MERGED] Feat OIDC login as namespace
Closed
#1399 [PR #349] [MERGED] Remove dependency on CGO
Closed
#1400 [PR #352] [CLOSED] fix(deps): update go modules
Closed
#1401 [PR #351] [MERGED] Added FreeBSD to the supported clients
Closed
#1402 [PR #355] [CLOSED] docs(README): update contributors
Closed
#1391 [PR #336] [MERGED] contributor: set specific version
Closed
#1392 [PR #338] [MERGED] docs(README): update contributors
Closed
#1393 [PR #345] [MERGED] docs(README): update contributors
Closed
#1394 [PR #344] [MERGED] Make /metrics listen on a different address
Closed
#1395 [PR #347] [MERGED] Remove the concept of "shared nodes"
Closed
#1396 [PR #348] [MERGED] fix(machine): remove comment
Closed
#1397 [PR #346] [MERGED] Fix ip allocation bug, make integration tests faster
Closed
#1385 [PR #325] [MERGED] Update changelog for 0.13.0
Closed
#1386 [PR #330] [MERGED] Add ohdearaugustin to CODEOWNERS for config and docs
Closed
#1387 [PR #332] [MERGED] Fix spelling error
Closed
#1388 [PR #333] [MERGED] Topic/renovatebot
Closed
#1389 [PR #334] [MERGED] CODEOWNER: add renovate config ohdearaugustin
Closed
#1390 [PR #337] [CLOSED] workflows/contributors: rm PR config
Closed
#1380 [PR #319] [CLOSED] Fix errror in kustomize init.bash
Closed
#1381 [PR #317] [MERGED] Setup Sponsor button
Closed
#1382 [PR #320] [MERGED] Improvements on the ACLs and bug fixing
Closed
#1383 [PR #321] [MERGED] Topic/specific go version
Closed
#1384 [PR #324] [MERGED] Update README.md
Closed
#1375 [PR #312] [MERGED] poll: fix swapped machine<->namespace labels
Closed
#1376 [PR #314] [MERGED] Upgrade to tailscale 1.20.4
Closed
#1377 [PR #315] [MERGED] Improve the windows client docs as per discord recommendations
Closed
#1378 [PR #316] [MERGED] Remove kv-namespace-worker
Closed
#1379 [PR #313] [MERGED] Add docs on how to set up Windows clients
Closed
#1370 [PR #303] [MERGED] Migrate ip_address field to ip_addresses
Closed
#1371 [PR #305] [MERGED] Note when running as another user in systemd
Closed
#1372 [PR #302] [MERGED] Set up build avoidance
Closed
#1373 [PR #306] [MERGED] Introduce API keys and enable remote control API
Closed
#1374 [PR #311] [MERGED] Issues with current ACL implementation and solution proposal
Closed
#1365 [PR #297] [MERGED] Configurable mtls
Closed
#1366 [PR #292] [MERGED] Make Unix socket permissions configurable
Closed
#1367 [PR #299] [MERGED] Tag 0.12.4 in CHANGELOG
Closed
#1368 [PR #300] [MERGED] Typo
Closed
#1369 [PR #301] [MERGED] Set goreleaser to only care about Go 1.17
Closed
#1359 [PR #278] [MERGED] PollNetMapStream: do not create any rows during long-poll operation
Closed
#1360 [PR #289] [MERGED] Trim whitespace from privateKey before parsing
Closed
#1361 [PR #281] [CLOSED] fix wrong condition
Closed
#1362 [PR #282] [MERGED] Fix missing return in PollNetMapHandler
Closed
#1363 [PR #290] [MERGED] Add generate private-key command
Closed
#1364 [PR #291] [MERGED] Upgrade to latest tailscale
Closed
#1354 [PR #271] [MERGED] Minor security updates in go.mod
Closed
#1355 [PR #273] [MERGED] Add new tailscale version to integration test
Closed
#1356 [PR #274] [MERGED] Strip binary, update to go-1.17.6
Closed
#1357 [PR #272] [MERGED] Prepare CHANGELOG for 0.12.3
Closed
#1358 [PR #276] [MERGED] Fix doc typos
Closed
#1348 [PR #262] [MERGED] Rewrite main documentation
Closed
#1349 [PR #261] [MERGED] Add note about outdated docs until we fix them
Closed
#1350 [PR #268] [MERGED] Prepare CHANGELOG for 0.12.2
Closed
#1351 [PR #263] [MERGED] Improve Docker docs
Closed
#1352 [PR #267] [MERGED] Fix example config link
Closed
#1353 [PR #270] [MERGED] Add docker alpine image
Closed
#1342 [PR #245] [MERGED] fix typo
Closed
#1343 [PR #248] [MERGED] Ignoe derp.yaml, don't panic in Serve()
Closed
#1344 [PR #250] [MERGED] Use go1.17 in goreleaser as required my go mod
Closed
#1345 [PR #256] [MERGED] Prepare CHANGELOG for 0.12.1
Closed
#1346 [PR #258] [MERGED] Fix docker release
Closed
#1347 [PR #255] [MERGED] Template Fixes
Closed
#1338 [PR #241] [MERGED] Enable marking releases as prerelease
Closed
#1339 [PR #242] [MERGED] Add initial CHANGELOG
Closed
#1340 [PR #243] [MERGED] Add GitHub Issue and Pull request templates
Closed
#1341 [PR #247] [MERGED] Add private_key_path to example config
Closed
#1330 [PR #229] [MERGED] Upgrade Tailscale version to 1.18.x
Closed
#1331 [PR #230] [MERGED] Running.md: fix missing backslash (\)
Closed
#1332 [PR #227] [MERGED] Simplify and improve register/reauth flow
Closed
#1333 [PR #231] [CLOSED] Update Running.md
Closed
#1334 [PR #236] [MERGED] fix(derp-example): change regionid in node
Closed
#1335 [PR #238] [MERGED] Revert postgres constant value
Closed
#1336 [PR #237] [MERGED] Fix default preauthkey expiration
Closed
#1337 [PR #239] [MERGED] The create-node subcommand under debug needs a 64 character key.
Closed
#1328 [PR #224] [MERGED] Improvements for namespace deletion
Closed
#1329 [PR #225] [MERGED] arm64 docker image build in release process
Closed
#1325 [PR #213] [MERGED] Typo in golang URL
Closed
#1326 [PR #214] [MERGED] Using distroless base image for Docker
Closed
#1327 [PR #223] [MERGED] Setup lint and format of Go, Proto and yaml/markdown
Closed
#1321 [PR #206] [MERGED] Prepare and show gRPC usage in CLI
Closed
#1322 [PR #207] [MERGED] docs(README): update contributors
Closed
#1323 [PR #209] [CLOSED] Enable prerelease support on goreleaser
Closed
#1324 [PR #212] [MERGED] Rework the CLI to use gRPC
Closed
#1315 [PR #199] [MERGED] update Running.md
Closed
#1316 [PR #197] [MERGED] Unify configuration, comment the options in config
Closed
#1317 [PR #200] [MERGED] Cli improvements -- nodes subcommand
Closed
#1318 [PR #202] [MERGED] Add note about main containing unreleased changes
Closed
#1319 [PR #204] [MERGED] Initial work preparing for API/gRPC
Closed
#1320 [PR #208] [MERGED] Support for IPv6 prefixes in namespaces
Closed
#1310 [PR #193] [MERGED] Another fix for the contributors section in README
Closed
#1311 [PR #191] [MERGED] Fix contributors
Closed
#1312 [PR #192] [MERGED] fix typo in docs
Closed
#1313 [PR #196] [MERGED] Add ability to fetch DERP from url and file
Closed
#1314 [PR #194] [MERGED] docs(README): update contributors
Closed
#1305 [PR #185] [CLOSED] fix apple configuration profile links
Closed
#1306 [PR #184] [MERGED] Move documentation away from README and use YAML everywhere
Closed
#1307 [PR #187] [MERGED] Use CGO_ENABLED=1 when building arm64
Closed
#1308 [PR #188] [MERGED] Fixed ARM64 compiler name
Closed
#1309 [PR #190] [MERGED] Fix arm64 (now for good)
Closed
#1300 [PR #176] [MERGED] Bugfix: the check to see if a node was already shared into a namespace
Closed
#1301 [PR #178] [MERGED] Apply some DRY to the sharing tests.
Closed
#1302 [PR #177] [MERGED] Cli unshare node
Closed
#1303 [PR #183] [MERGED] Add support for Split DNS (Restricted Nameservers)
Closed
#1304 [PR #182] [CLOSED] Golang ci lint config
Closed
#1295 [PR #169] [MERGED] Generate arm64 binaries in goreleaser
Closed
#1296 [PR #171] [MERGED] Added --force flag on node delete
Closed
#1297 [PR #167] [MERGED] Preload AuthKey Namespace on list nodes
Closed
#1298 [PR #172] [MERGED] Rename namespaces
Closed
#1299 [PR #174] [MERGED] Fix MagicDNS base domain
Closed
#1290 [PR #156] [MERGED] Disable version checker when using JSON output
Closed
#1291 [PR #157] [CLOSED] Show if an authkey has been used already in the CLI
Closed
#1292 [PR #159] [MERGED] Add field AlreadyUsed to AuthKeys
Closed
#1293 [PR #166] [MERGED] Improve help message to expire key
Closed
#1294 [PR #165] [MERGED] Show JSON on error when expiring key
Closed
#1285 [PR #145] [MERGED] Remove gitter for discord
Closed
#1286 [PR #147] [MERGED] Fix error 500 when deleting a shared node
Closed
#1287 [PR #144] [MERGED] Add CI builds with artifacts for PRs and main
Closed
#1288 [PR #155] [MERGED] Add JSON output when deleting node
Closed
#1289 [PR #150] [MERGED] Fix shared nodes
Closed
#1280 [PR #139] [MERGED] Make sure that goreleaser uses the appropriate version string when
Closed
#1281 [PR #140] [MERGED] Add the ability to specify the directory URL used for ACME.
Closed
#1282 [PR #137] [CLOSED] Fix goreleaser version
Closed
#1283 [PR #141] [MERGED] Document client OS support in a table
Closed
#1284 [PR #142] [MERGED] Simplify update logic
Closed
#1275 [PR #131] [MERGED] fix some typos in README
Closed
#1276 [PR #134] [MERGED] Attempt to improve update/long polling stability
Closed
#1277 [PR #130] [CLOSED] Allow preauthkeys to specify a subnet for machine to join
Closed
#1278 [PR #135] [MERGED] Fix a few typos in the tailscale command line arguments.
Closed
#1279 [PR #136] [MERGED] Code, pointer, variable cleanups. And metrics!
Closed
#1270 [PR #126] [MERGED] Initial work on OIDC (SSO) integration
Closed
#1271 [PR #121] [MERGED] New integration test for tailscale 1.14
Closed
#1272 [PR #122] [MERGED] Add support for Taildrop (file sharing)
Closed
#1273 [PR #128] [MERGED] Added version checker on Headscale startup
Closed
#1274 [PR #129] [MERGED] Add support for MagicDNS
Closed
#1265 [PR #113] [MERGED] Apple macOS profile support
Closed
#1266 [PR #114] [MERGED] Improve integration tests
Closed
#1267 [PR #115] [MERGED] Topic/fix docu
Closed
#1268 [PR #116] [MERGED] workflows/release: add docker full version tag
Closed
#1269 [PR #120] [MERGED] Fix namespace instructions in README.md
Closed
#1258 [PR #102] [MERGED] docs: add notes on how to build own DERP server
Closed
#1259 [PR #103] [MERGED] Add support for sharing nodes across namespaces
Closed
#1260 [PR #109] [MERGED] Update to Tailscale 1.14
Closed
#1261 [PR #108] [MERGED] Dockerfile: add golang tag
Closed
#1262 [PR #107] [MERGED] Remove trace lines about NO_COLOR.
Closed
#1263 [PR #112] [MERGED] fix typo, it is 'relayed' not 'relied'
Closed
#1264 [PR #111] [MERGED] fix typo
Closed
#1252 [PR #92] [MERGED] Enhance route command with ptables and multiple routes
Closed
#1253 [PR #94] [MERGED] Split lint and test CI files
Closed
#1254 [PR #96] [MERGED] Fix setting of version
Closed
#1255 [PR #99] [MERGED] Use explicit version in Dockerfile
Closed
#1256 [PR #101] [MERGED] fix: check last seen time without possible null pointer
Closed
#1257 [PR #98] [MERGED] Initial DNS server support
Closed
#1247 [PR #83] [MERGED] Improve reliability of PollMapHandler, more integration tests
Closed
#1248 [PR #84] [MERGED] Improve logic to keep nodes up to date with the network state
Closed
#1249 [PR #86] [MERGED] Improve tables in CLI
Closed
#1250 [PR #89] [MERGED] Topic/docker release
Closed
#1251 [PR #87] [MERGED] Send notifications when enabling a route
Closed
#1243 [PR #79] [MERGED] Correct a typo in routes.go
Closed
#1244 [PR #80] [MERGED] Add CLI command to mark preauthkeys as expired
Closed
#1245 [PR #82] [MERGED] Also notify peers when deleting ephemerals
Closed
#1246 [PR #81] [MERGED] Add Integration tests
Closed
#1238 [PR #72] [MERGED] Make IP Prefix configurable and available ip deterministic
Closed
#1239 [PR #74] [MERGED] Switch to a structured logger
Closed
#1240 [PR #75] [MERGED] Fix deadlock issue
Closed
#1241 [PR #76] [MERGED] Try to detect color support, make color configurable
Closed
#1242 [PR #77] [MERGED] Remove more deadlocks
Closed
#1235 [PR #66] [MERGED] Remove old docker code
Closed
#1236 [PR #67] [MERGED] Fix typo in example
Closed
#1237 [PR #69] [MERGED] Use 8080 as default port in the example config
Closed
#1230 [PR #60] [MERGED] Add some more detail to the README about the different Let's Encrypt
Closed
#1231 [PR #61] [MERGED] Refactor cmdVersion to cli package
Closed
#1232 [PR #59] [MERGED] Add a 'tls_letsencrypt_listen' config option
Closed
#1233 [PR #63] [MERGED] Added communication between Serve and CLI using KV table
Closed
#1234 [PR #62] [MERGED] Topic/refactor config
Closed
#1225 [PR #48] [MERGED] Improving namespace/user support
Closed
#1226 [PR #51] [MERGED] Fix minor typo
Closed
#1227 [PR #54] [MERGED] Implement node deletion
Closed
#1228 [PR #55] [MERGED] Turn the combination of TLS-ALPN-01 and listen_addr on a port other than
Closed
#1229 [PR #57] [CLOSED] Added init subcommand to generate base config
Closed
#1220 [PR #43] [MERGED] Change all commands to plural words
Closed
#1221 [PR #45] [MERGED] Use gorm connection pool
Closed
#1222 [PR #44] [MERGED] Add support for Policy ACLs
Closed
#1223 [PR #46] [MERGED] Update DERP server definitions
Closed
#1224 [PR #47] [MERGED] Added HTTP responses on map errors
Closed
#1215 [PR #35] [MERGED] Use goreleaser to generate binary builds
Closed
#1216 [PR #38] [MERGED] Add k8s deployment, standalone app Dockerfile.
Closed
#1217 [PR #40] [MERGED] Fix nil dereference in nodes list command.
Closed
#1218 [PR #41] [MERGED] Migrate to GORM 2.0
Closed
#1219 [PR #42] [MERGED] Update Headscale to Tailscale 1.10
Closed
#1209 [PR #27] [MERGED] Remove dependency on Postgres' jsonb field
Closed
#1210 [PR #31] [MERGED] Improving how headscale handles the client startup process
Closed
#1211 [PR #30] [MERGED] a bunch of smaller fixes
Closed
#1212 [PR #29] [MERGED] Add support for ephemeral nodes via a special type of pre-auth key.
Closed
#1213 [PR #33] [MERGED] Handle client sending new NodeKey
Closed
#1214 [PR #34] [MERGED] Fix a race condition when a client closes the connection
Closed
#1205 [PR #25] [CLOSED] Added the first integration test with the official Tailscale client
Closed
#1206 [PR #24] [MERGED] Add a DestroyNamespace command and tests for the Namespace functions.
Closed
#1207 [PR #26] [MERGED] Add more tests
Closed
#1208 [PR #28] [MERGED] Adding SQLite support
Closed
#1199 [PR #17] [MERGED] Namespace is now a flag for all the commands
Closed
#1200 [PR #18] [MERGED] Add a basic CI workflow with github actions
Closed
#1201 [PR #19] [MERGED] List nodes in namespace + register under node command
Closed
#1202 [PR #20] [MERGED] Preauthkeys improvements
Closed
#1203 [PR #21] [MERGED] Support for pre auth keys
Closed
#1204 [PR #22] [MERGED] Added JSON-formatted output to CLI
Closed
#1193 [PR #10] [MERGED] Linter warnings
Closed
#1194 [PR #11] [MERGED] fix: remove db twice
Closed
#1195 [PR #12] [MERGED] Add a Gitter chat badge to README.md
Closed
#1196 [PR #15] [MERGED] Add first tests
Closed
#1197 [PR #13] [MERGED] Add a Makefile with a few targets.
Closed
#1198 [PR #16] [MERGED] Reorganise the CLI structure
Closed
#1187 [PR #2] [MERGED] Add Dockerfile
Closed
#1188 [PR #4] [MERGED] minor readme typo
Closed
#1189 [PR #6] [MERGED] Add additional locations to look for the config.json file
Closed
#1190 [PR #7] [CLOSED] Handle relative paths in private_key_path and derp_map_path
Closed
#1191 [PR #9] [MERGED] Add support for TLS to the web service.
Closed
#1192 [PR #8] [MERGED] Handle relative paths in private_key_path and derp_map_path
Closed
#1185 [PR #3] [MERGED] Bump ini from 1.3.5 to 1.3.8 in /frontend
Closed
#1186 [PR #1] [CLOSED] Bump websocket-extensions from 0.1.3 to 0.1.4 in /frontend
Closed
#1172 [Bug] No traffic until headscale restart (rejected due to acl )
Closed
#1165 [Bug] headscale nodes approve-routes list-routes -i flag doesn't filter by node ID
Closed
#1167 [Bug] Can not delete user
Closed
#1168 [Feature] Hope the development version documentation can be merged as soon as possible
Closed
#1169 [Feature] Add Node-specific 'Connection Status' and 'Last Seen' Metrics
Closed
#1163 [Feature] Add optional feature to persist IsOnline field to database
Closed
#1164 [Bug] after removing node there are errors in the logs
Closed
#1161 [Feature] log errors from acme/autocert renewals
Closed
#1157 [Feature] cli extension node list
Closed
#1158 [Bug] Used IPs are kept in memory for ephemeral nodes
Closed
#1152 [Bug] Error parsing ACL entry "randomizeClientPort" in 0.27.1
Closed
#1153 [Feature] Hashed secrets
Closed
#1154 [Feature] Predictable IPs
Closed
#1147 [Bug] Sometimes the advertised route is not set as primary route
Closed
#1148 [Bug] tailscale accept a local subnet
Closed
#1144 [Bug] [Entra OIDC] missing code or state parameter / empty OIDC callback params
Closed
#1145 [Bug] Automatic route approval doesn't work for tagged preauth keys
Closed
#1146 [Bug] ACLs not applied on newly added nodes using OIDC
Closed
#1141 [Bug] Upgrade from 0.26.1 --> 0.27.0 makes all clients unable to connect to headscale
Closed
#1142 [Bug] After upgrading to 0.27 pfSense cannot keep the login state when rebooting or restarting the Tailscale service
Closed
#1143 [Bug] metrics_listen_addr set to "" results in metrics listening on random port
Closed
#1136 [Bug] Version 0.27.0 when using oidc doesn't respect expiry parameter on session lengths
Closed
#1137 [Bug] If an unknown user is added to the policy, SSH policies become empty
Closed
#1139 [Bug] sqlite3 migration failed: UNIQUE constraint failed
Closed
#1140 [Bug] v0.26.1 to v.27.0 sqlite failure with 'namespaces' table
Closed
#1134 Headscale v0.27.0 not storing/propagating node endpoints - all connections forced through DERP relay
Closed
#1135 Tags cannot owner other tags
Closed
#1130 [Bug] SQLite schema failed to validate
Closed
#1131 [Bug] Container doesn't begin serving, instead shows help and exits.
Closed
#1132 TestShuffleDERPMapDeterministic is flaky
Closed
#1125 [Bug] Unable to rename nodes
Closed
#1126 [Bug] DERP: derpport is ignored
Closed
#1127 [Bug] autogroup:self will cover other ACL rules
Closed
#1128 [Bug] v0.26.1 to v.27.0 sqlite failure with 'users' field
Closed
#1123 [Bug] Unable to split access to exit nodes
Closed
#1124 [Bug] Clients display external headscale hostname rather than internal
Closed
#1120 [Bug] Unsolicited node logout
Closed
#1121 [Bug] Error parsing ACLs since 0.27
Closed
#1122 [Bug] v0.27.0 Headscale break if I using litestream
Closed
#1114 [Bug] CLI last version checks
Closed
#1115 [Bug] Headscale API Bypasses Middleware Check
Closed
#1117 Local Unbound not used
Closed
#1118 [Bug] v0.27.0 policy apply errors
Closed
#1119 [Bug] v0.27.0 crashes during v0.26.1 policy parsing
Closed
#1111 [Bug] docker image does not have the "Created" time
Closed
#1113 [Bug] ACL with autogroup:self is only pushed after restart
Closed
#1108 [Bug] Running Tailscale client with exit node on the same host with Headscale slows uplink for connected clients.
Closed
#1109 Documentation for exit nodes is outdated
Closed
#1110 [Bug] Clients still contact log.tailscale.com when connected to headscale unless TS_NO_LOGS_NO_SUPPORT=true
Closed
#1105 [Bug] Exit node is visible to nodes that aren't allowed to use it
Closed
#1106 [Feature] add favicon to web page(s)
Closed
#1107 [Feature] Please make version available through either api or web interfaceenhancement
Closed
#1102 [Bug] Node vanishes from the nodelist and is unreachable
Closed
#1103 [Bug] (SSH) Policy does not select any of the two when duplicate users are present
Closed
#1104 [Bug] Can't split access for different users/groups to different Tailscale exit nodes in 0.26.1
Closed
#1100 [Feature] make version available in some kind of api output
Closed
#1101 [Bug] Unable to remove routes
Closed
#1096 [Bug] cant connect over ipv6 only connection
Closed
#1097 [Bug] If a computer set an invalid hostname, the entire network will be unavailable (re-emerging)
Closed
#1093 [Bug] Headscale hangs on SIGINT
Closed
#1090 [Bug] Node registration via the api fails despite having valid args
Closed
#1091 [Bug] Enabling again a fallback node redundant routes made both main and fallback node routes primary=false
Closed
#1092 [Bug] Headscale serving subnet from offline node.
Closed
#1088 [Feature] Machine sharing
Closed
#1089 [Feature] Hide inaccessible nodes from my devices
Closed
#1084 IP segment settings, and I can't start it
Closed
#1085 [Bug] Internal server error on /verify
Closed
#1086 [Bug] Registration of duplicate NodeKeys leads to DoS / Spoofing
Closed
#1081 [Bug] Connection lost after another user/node join the tailnet
Closed
#1083 [Feature] FR: Better error-handling / debugging of expired SSL certificate in headscale server
Closed
#1078 [Bug] no IPv4 or IPv6 prefix configured, minimum one prefix is required
Closed
#1080 ACL issue with username
Closed
#1075 [Feature] Helm Chart
Closed
#1076 [Bug] panic in serveLongPoll after ephemeral node deletion ("invalid memory address or nil pointer dereference")
Closed
#1072 [Bug] <title>register node err msg:registration ID must be 24 characters long
Closed
#1073 [Feature] Multi-tenancy, multiple tailnets and fine grained api authorization support
Closed
#1074 [Bug] Connection times out
Closed
#1068 [Bug] Part of network not avail when the DERP list load is failed
Closed
#1069 [Bug] Updating of existing channel leads to unexpected removing of ephemeral nodes
Closed
#1070 [Bug] Headscale embedded Derper Server speed slow
Closed
#1071 [Bug] headscale generate private-key requires a config.yaml file (even if empty)
Closed
#1066 [Bug] Any DB error on getting node during serving stream updates leads to panic and further delays
Closed
#1063 [Feature] Advertises a STUN port different from the one it listens on
Closed
#1065 [Bug] re-authentication doesn't work, new node key is unknown
Closed
#1060 [Feature] delete/create multiple users/authkeys at once
Closed
#1061 [Bug] Sequential IP allocator increments when API register request fails
Closed
#1062 Feature Request: Config-level switch to disable node-key expiration (for long-lived IoT fleets)
Closed
#1057 [Bug] key is delivered to tailscale node for a long time (6-7 minutes) after re-authentication, traffic doesn't pass in this time
Closed
#1058 [Bug] SSH policy not working after update to 0.26.1
Closed
#1059 [Bug] Default ACLs differ from headscale
Closed
#1054 [Bug] Auto approve routes broken for tags
Closed
#1055 [Feature] shoe client version when list nodes
Closed
#1056 [Feature] Add expiration and status filtering support to nodes CLI command
Closed
#1051 headscale node list command shows client's "Last seen" in GMT even when system timezone set to Asia/Kolkata (IST, +0530)
Closed
#1052 [Bug] Apple TV tvOS will not connect
Closed
#1053 [Bug] loading ACL policy: check with a host results in *v2.Host not supported"
Closed
#1048 [Bug] confusing error message referencing "v2.Asterix"
Closed
#1049 [Bug] <title>How can i modify the IP address of the connected client
Closed
#1050 [Bug] Inconsistent handling of OIDC claims
Closed
#1047 [Bug] nodes are duplicated after expiry and reauth
Closed
#1045 [Feature] Add high-level server metrics
Closed
#1046 [Feature] ability to change device hostname
Closed
#1043 [Bug] Group-based ACL not working for local users
Closed
#1044 [Bug] SSH autogroup:nonroot does not permit non-root usernames
Closed
#1039 [Bug] Nodes Reported as Offline when Updating Routes
Closed
#1041 [Bug] Security Issue - Unwanted Control Plane client (bot/scraper/monitoring of users?)
Closed
#1042 [Bug] 0.26.0 Custom DERPs not seeing some tailnet nodes after update
Closed
#1034 [Bug] headscale nodes backfillips flag not working
Closed
#1035 [Bug] Outdated packages in Nix
Closed
#1036 [Bug] Invalid ACL stored in DB, crash on startup
Closed
#1037 [Bug] Please link "Create a backup of your database." to relevant documentation.
Closed
#1038 [Bug] compilation errors
Closed
#1033 [Bug] ACL invalid policy accepted
Closed
#1030 [Bug] Adding a tag via CLI removes advertised tag
Closed
#1031 [Feature] documentation for Android auth with auth key
Closed
#1032 Policy: autogroup support
Closed
#1027 [Bug] Headscale fails to recognize ip_prefixes in config: "no IPv4 or IPv6 prefix configured, minimum one prefix is required" on clean install (v0.25.0/v0.26.0, Docker & native)
Closed
#1028 V0.26 Route List formatting
Closed
#1029 [Bug] libssl3 vulnerability - CVE-2024-13176
Closed
#1024 [Bug] tags and autoApprovers not working
Closed
#1025 [Feature] Reject invalid dst in policy
Closed
#1026 [Bug] v0.26 policy: reduce routes sent to peers based on packetfilter #2561
Closed
#1021 [Bug] Preauth key generation command line
Closed
#1022 [Feature] transitional page before redirecting to OIDC provider
Closed
#1023 [Bug] ACL User/Groups not working in v0.26.0
Closed
#1018 [Bug] OIDC via Cloudflare Access has incorrect username
Closed
#1020 [Feature] In-Memory State Management
Closed
#1019 [Bug] node randomly gets removed due to a panic
Closed
#1015 [Bug] preauthkeys list - panic: strconv: illegal AppendInt/FormatInt base
Closed
#1016 [Feature] last_seen contains time zone
Closed
#1017 [Bug] PR #2474 can cause duplicate users
Closed
#1012 [Bug] Last seen is missing in beta
Closed
#1013 [Bug] policy check complaining about users not being found in beta
Closed
#1014 [Feature] Synology support (tailscale client versions are behind)
Closed
#1011 [Feature] Possibility of using a larger database connection pool (while still using the pure Go SQLite implementation)
Closed
#1009 [Feature] Raise on reference to invalid group in policy
Closed
#1010 [Bug] autoApprove does not work for 0.0.0.0/0 and ::/0
Closed
#1007 [Bug] load(migrate) policy v2 from file to database
Closed
#1008 Tailscale nodes unable to connect peer-to-peer due to ISP NAT mapping of server public IP, traffic always routed via DERP relay
Closed
#1003 [Bug] headscale documentation regarding docker usage displays outdated information compared to the source code of the page
Closed
#1005 [Bug] autoApprove does not work from start
Closed
#1006 [Feature] Change node IP address
Closed
#1004 [Bug] PR Integration tests are failing due to legacy service shutdown on April 15, 2025
Closed
#1001 [Feature] add robots.txt to headscale
Closed
#1002 [Feature] Derper version
Closed
#997 [Bug] window client report：panic: runtime error: invalid memory address or nil pointer dereference
Closed
#998 [Feature] derper server supports namespace isolation
Closed
#999 [Bug] Failed to update 0.23.0 -> 0.24.x
Closed
#994 [Bug] LetsEncrypt cache dir lost - unable to bring headscale back up.
Closed
#995 [Feature] update is disabled for modes other than 'database'
Closed
#996 [Bug] Pre-auth keys "user" field returns the email.
Closed
#993 [Feature] Query claims from OIDC UserInfo if not available in ID token
Closed
#992 [Feature] Replacing encoding/json with https://github.com/bytedance/sonic
Closed
#991 [Bug] <title>Error loading config - yaml line12 - not able to find key
Closed
#988 [Bug] SSL Certificate for the Headscale Documentation Site is Expired
Closed
#989 [Feature] Extra DNS Records / API support CNAME / wildcards
Closed
#990 [Bug] unaligned 64-bit atomic operation
Closed
#985 [Question] Node names in netmap do not have a dot appended to their FQDN
Closed
#986 [Bug] could not register node: node not found in registration cache
Closed
#987 [Feature] Better setup / install docs / avoid reinventing the wheel
Closed
#982 [Feature] Provide a few suggestions or questions
Closed
#983 [Feature] Round robin for extra_dns
Closed
#984 [Bug] No exit node and device route don't work
Closed
#981 [Bug] 'headscale' commands unusable under load
Closed
#979 [Feature] Add option to expire node on disconnect
Closed
#980 [Bug] Cannot create preauth keys for users without username
Closed
#976 [Bug] Docker - High CPU Usage - RATELIMIT lines in log
Closed
#977 [Bug] autoApprove works only after advertising and un-advertising and advertising again
Closed
#978 [Question] Is this supposed to be like this?
Closed
#973 [Bug] Error out on unknown symbol for policy v2
Closed
#974 [Bug] Primary route no longer shown in CLI
Closed
#975 [Feature] transport layer offload optimisation
Closed
#972 [Bug] Delete does not work from docker terminal exits
Closed
#970 [Bug] Internal server error when logging in using Google OIDC
Closed
#971 [Bug] CLI could not connect to a server
Closed
#967 [Bug] Headscale exit node won´t let me access the internet when limited to specific user
Closed
#968 [Bug] Headscale v25.1 or Tailscale 1.70+ causes NCSI (Network Status) to appear offline
Closed
#969 [Bug] re-assigen node to new user THEN new user can not see this node
Closed
#964 [Bug] Taildrop between un-tagged and tagged nodes works
Closed
#965 [Feature] Add Taildrop-Flag to Config
Closed
#966 [Bug] creating or updating user: constraint failed: UNIQUE constraint failed: users.name
Closed
#962 Request to use logo images on Snap Store listing
Closed
#963 [Feature] Posture check
Closed
#961 [Feature] ghcr.io container registry availablility
Closed
#958 [Feature] remove instruction pages and set server's homepage
Closed
#960 [Bug] Same name hostnames exitnode shows only the old one but they have different node names
Closed
#959 [Bug] Reauthentication via OIDC Breaks Connectivity Until Manual Disconnect and Reconnect
Closed
#956 [Bug] tailscale up with routes and login loses track of routes
Closed
#957 [Bug] Cannot Ban Specific Derp Region using RegionID
Closed
#955 [Bug] <title>Can't log in. Could not get the create map update error="tailNode, failed to create FQDN: failed to create valid FQDN: node has no given name"
Closed
#952 [Bug] OIDC Token Verification Fails When Authentik Encrypts "id_token"
Closed
#953 [Bug]Unable to enable advertise-routes
Closed
#954 [Docs] Is "Enable HTTPS" supported?
Closed
#949 [Feature] WHMCS
Closed
#950 [Bug] OIDC Register/Login Page Opens Twice
Closed
#951 [Feature] Sub-ACLs can be made with the abbilty to affect a limited-number of devices
Closed
#948 headscale serv can't get mobile device name
Closed
#946 [Bug] Headscale panic when a registered tailscale node is expired and is trying to bootstrap using an already used or expired preauthkeys
Closed
#947 [Bug] Version 0.25.0 breaks exit node routes
Closed
#943 [Bug] a windows client cannot login
Closed
#944 [Feature] Is it possible to prevent different users from seeing each other's nodes?
Closed
#945 CA-Certificate : failed to verify --> unknown source
Closed
#940 [Feature] More context for "node not found" error
Closed
#941 Tags tracking bug
Closed
#942 [Feature] <Proposal to Create an Official Headscale Organization for Better Collaboration 🌟>
Closed
#937 Policy rework tracking bug
Closed
#938 [Feature] More Information of Unsupported Tailscale Client
Closed
#935 [Bug] DB migration fails to 24.2 (FK constraints on preauth_keys in nodes table)
Closed
#936 [Bug] Unable to compile latest codes
Closed
#934 [Feature] support tailscale in docker desktop?
Closed
#931 TestValidateResolvConf is partially failing
Closed
#932 [Bug] ERR noise upgrade failed error
Closed
#933 Replace version handling with Go 1.24 handling
Closed
#928 dead link to web ui choices in pinned issue
Closed
#929 [Bug] Tags applied to nodes are not applied in ACL until headscale service is restarted after adding the tag
Closed
#930 Separate user and server errors in http handlers
Closed
#925 Do not allow editing users from OIDC
Closed
#926 [Bug] headscale preauthkeys list -o json missing fields present in yaml: "reusable", "ephemeral"
Closed
#927 [Feature] enhance documentation OR rethink MagicDNS
Closed
#924 Migration failed
Closed
#922 [Bug] EntraID OIDC - ACLs not being applied to OIDC registered users
Closed
#923 [Feature] <title>Cloudflare Tunnel support
Closed
#919 [Bug] 0.24.0 immediately panics on time.NewTicker() with derp disabled
Closed
#920 [Bug] peers are not propagated to tagged nodes
Closed
#921 [Bug] Latest Docker Release Breaks Foreign Key Constraint in Database
Closed
#916 [Bug] headscale fails to start on full disk
Closed
#918 [Bug] Subnet routes are pushed to clients when not in allowed ACL
Closed
#913 [Feature] OIDC "offboarding"
Closed
#914 [Bug] Headscale tags differ conceptually from Tailscale tags
Closed
#915 [Bug] Headscale crashes when derp.update_interval is not set
Closed
#911 [BUG] Linux Clients Frequently Disconnect v1.78.1
Closed
#910 [Bug] SIGSEGV: segmentation violation code=0x1 addr=0x8 pc=0x860100
Closed
#909 [Bug] Calling routes API endpoint crashes with SIGSEGV
Closed
#907 [Bug] DNS Resolve Error for the base_domain(server_rul) at v0.24.0
Closed
#908 [Bug] Automatic database migration from 0.23.0 to 0.24.0 does not work with postgres
Closed
#904 "Domain" to display in GUI applications
Closed
#905 [Feature] Wildcard support for split DNS configuration
Closed
#906 [Bug] If a computer set an invalid hostname, the entire network will be unavailable
Closed
#901 [Bug] OIDC users don't always get a username
Closed
#902 [Bug] "Getting started" doc suggests one tailnet per user
Closed
#903 [Bug] OIDC nil deref when visiting invalid/old callback urls
Closed
#898 [Feature] Include Headscale version in Swagger API Documentation
Closed
#899 [Bug] Nagging message to upgrade to a beta version
Closed
#900 [Bug] Change Account
Closed
#895 [Feature] Pre-auth keys without user binding & group tagged devices
Closed
#896 [Feature] Recommended Exit Nodes
Closed
#892 [Bug] headscale uses cfg.BaseDomain for building FQDNs
Closed
#893 Post Quantum
Closed
#889 [Bug] "headscale node ls --tags" does not list tags after v0.24.0-beta.1 upgrade
Closed
#890 [Bug] Headscale attempts to use non-existent TLS certs when using OIDC behind a reverse proxy
Closed
#891 [Bug] Headscale service is disabled after upgrading the deb package
Closed
#887 [Bug] Dead link to container docs in 0.23.0 changelog, possible buggy documentation
Closed
#888 [Feature] Enable CORS inside Headscale.
Closed
#883 [Feature] [Docs] update OIDC documentation for 0.24.0+
Closed
#885 [Bug] SSH permission denied after DB updated from wal v24.0beta1
Closed
#881 [Bug] SIGHUP complains about ACL errors when no ACL is configured
Closed
#882 [Bug] Misleading error message while processing dns.extra_records_path
Closed
#878 Add constraint between routes and nodes
Closed
#879 [Bug] Filewatcher stops watching dns.extra_records_path
Closed
#880 [Bug] email_verified Field Returned as String Causes Unmarshal Error in v0.24.0-beta.1
Closed
#877 [Bug] Unable to connect to Tailscale coordination server warning
Closed
#874 [Feature] Configurable Registration Cache timeouts
Closed
#875 [Feature] add note to docs about reloading ACLs with SIGHUP
Closed
#876 [Bug] Non-system headscale user and group from DEB packages
Closed
#871 [Feature] Use the nonce parameter in OIDC authorization request to mitigate replay attacks
Closed
#872 [Feature] Hide Client List on Status
Closed
#873 [Feature] healthcheck command
Closed
#869 [Bug] https://headscale.net/ is down
Closed
#870 [Feature] A GUI client
Closed
#867 [Feature] Create a nostr account for the project for announcements and zapraising
Closed
#866 [Feature] make it possible to read extra_records from file
Closed
#865 [Bug] Crash on startup while reading sqlite database
Closed
#862 [Feature] Adding an option to prevent tailscale clients adding ~. to its DNS search domains for systemd-resolved.
Closed
#863 [Bug] Unable to delete a route that doesn’t belong to anyone
Closed
#864 Migration path from PostgreSQL to SQLite
Closed
#859 [Bug] Correct way to disable override local DNS in new configuration?
Closed
#860 [Feature] Template-based ACL generation
Closed
#861 [BUG] Lose Update to 0.23.0 (lost mtu)
Closed
#856 [Bug] Modifying prefixes:v4 does not take effect
Closed
#857 [Bug] CLI should use Stable IDs instead of usernames
Closed
#858 [Feature] nested groups support
Closed
#853 [Bug] Unable to access Headscale http server after installation
Closed
#854 [Feature] Allow to lookup Node by its Tailnet IP address in GRPC API
Closed
#855 [Bug] TestDERPServerWebsocketScenario is broken
Closed
#850 [question] --verify-clients for the embedded DERP server
Closed
#852 [Bug] test
Closed
#847 [Bug] subnet router failover not working properly when the subnet router node is not there at client authentication time ?
Closed
#848 [Feature] Decide user and subnet visibility based on ACL rules
Closed
#849 [Bug] 0.23.0 There seems to be some issues with the configuration
Closed
#844 [Feature] support tailscale wasm client
Closed
#845 [Bug] Latest config example contains deprecated key
Closed
#846 Debug docker image size is ridiculous.
Closed
#841 [Feature] Plea: keep "use_username_in_magic_dns" even after tags are fixed
Closed
#842 [Bug] failed to bind to TCP address: listen tcp :50443: bind: address already in use
Closed
#843 [Bug] Exessive logging
Closed
#838 [Feature] Add host_info to api for nodes
Closed
#839 [Bug] Tailscale Client Fails to Resolve DNS
Closed
#840 [Bug] testing for server_url containing base_domain is too restrictive
Closed
#835 [Feature] Support self-signed TLS (other than Let's Encrypt)
Closed
#836 [Bug] sqlite WAL never checkpointed, leading to constantly-increasing disk usage
Closed
#837 Using OpenID Connect should prevent CLI creation of users
Closed
#832 connection attempts to machine/map failed
Closed
#833 [Bug] Cannot add nodes
Closed
#834 [Bug] XSS Vulnerability in /admin/users
Closed
#830 [Bug] Nodes fail to remove from notifier - ERR update not sent
Closed
#831 [Bug] Remote CLI Configuration Problem after Upgrading to Headscale 0.23.0
Closed
#829 [Feature] Taildrop between users
Closed
#826 [Bug] ACL not working as expected
Closed
#827 Register a cloned VM as a separate node.
Closed
#828 [Bug] "Unexpected fault address" when opening SQLite db under armv7
Closed
#823 No connections reported after upgrading to version v0.23.0 from version v0.22.3
Closed
#824 Cloned VM with existing connection is not registered but has access/cannot deregister.
Closed
#825 [Bug] print wrong node information in poll.go
Closed
#820 [Bug] Does not receive ‘user’ field when changing node owner via API
Closed
#821 [Bug] ACLs with exact ip addresses don't work
Closed
#817 [Bug] Inconsistency ‘givenName’ in node
Closed
#819 [Bug] no logging in JSON format, even when setting it in configuration
Closed
#815 [Feature] Tutorial on Deploying Headscale with TalosOS
Closed
#816 [Bug] container: missing stable-debug tag
Closed
#814 [Bug] ACL: DST can be accessed by SRC
Closed
#811 [Feature] Assign IP addresses to non-headscale devices
Closed
#808 [Bug] <title>missing "Bearer " prefix in "Authorization"
Closed
#809 [Bug] Tailscale HEAD (1eaad7d3d) is broken in integration tests
Closed
#810 [Feature] Any docs or instructions about Headscale API?
Closed
#807 [Bug] Nodes ls shows no devices after docker container restart
Closed
#805 [Bug] <title>If there are two users using the same subnet range, he only works with one
Closed
#806 [Feature] wildcard dns name rule
Closed
#802 [Feature] API endpoint api/v1/node/<nodeId> should publish NetInfo and endpoints information.
Closed
#803 [Bug] Unable to delete node
Closed
#804 [Feature] Ability to change IP address
Closed
#799 [Feature] Support Taildrive
Closed
#800 [Bug] <title>OCI runtime exec failed: exec failed: unable to start container process: exec: "/bin/bash"
Closed
#801 [Bug] Error initializing error="enabling foreign keys: disk I/O error
Closed
#796 [Bug] <title>ACL does not work with exit node
Closed
#797 [Bug] Split DNS not working with v0.23.0
Closed
#798 [Bug] Hostname changes are not reflected
Closed
#794 [Bug] Debian packages use incorrect shell
Closed
#795 [Bug] ERROR: Failed to extract ServerMetadata from context
Closed
#791 [Feature] Allow nodes to use SSH agent forwarding
Closed
#792 [Bug] error 404 when trying to connect to headscale
Closed
#787 [Bug] Crash when deleting an online node
Closed
#788 [Bug] Different A record for nodes with the same name
Closed
#789 [Bug] headscale nodes list always prints debug/trace messages
Closed
#784 [Feature] Compatibility with Tailout
Closed
#785 [Feature] Ability to Read Postgres-Pass from File
Closed
#786 [Improvement] use go-elem for HTML pages
Closed
#781 [Bug] Convert proposals to issues or delete them
Closed
#782 [Bug] failed to bind to TCP address: listen tcp 0.0.0.0:443: bind: permission denied
Closed
#783 [Feature] Support for OneCGNATRoute network policy option
Closed
#778 [Feature] <title>How can Headscale manage IPs and set the IP information for nodes?
Closed
#779 [Feature] Update documentation for 0.23.0 release
Closed
#780 [Bug] Node registered with preauthkey has expiration of 0001-01-01 00:00:00 in Beta 2.
Closed
#775 [Bug] Fatal Error: Did not find expected key
Closed
#776 [Bug] docker v0.23.0-beta2
Closed
#777 [Bug] Reauthenticate with OIDC does not work in 0.23.0-beta2
Closed
#773 [Bug] Upgrade from version 0.22.3 to 0.23-beta2 failed database migration
Closed
#774 [Bug] "Could not get the create map update"
Closed
#772 [Issue]Route is not pushed on client machine
Closed
#769 [Bug] Latest supported client.
Closed
#770 [Bug] AutoApprovers route not work as expect
Closed
#771 [Bug] Failed to read headscale configuration error="server_url cannot contain the base_domain, this will cause the headscale server and embedded DERP to become unreachable from the Tailscale node."
Closed
#766 [Bug] Upgrade from 0.22.3 to 0.23.0-beta2 loses/forgets routes
Closed
#767 [Bug] dns.use_username_in_magic_dns configuration key is deprecated warning
Closed
#768 [Bug] NextDNS does not work in 0.23.0-beta2
Closed
#763 [Bug] Windows magic DNS not working in beta2
Closed
#764 [Bug] Unable to Add Another Account on Windows 10 Client 1.70.0
Closed
#765 [Bug] Policy ACLs broken in v0.23.0-beta2 but worked in v0.23.0-beta1
Closed
#762 [Bug] New Config.yaml ACL section does not work - Must use old acl_policy_path
Closed
#760 [Bug] 0.23.0-beta client setup hangs on linux on raspberry pi
Closed
#761 [Bug] gRPC API fails to resolve relative policy file path, unlike server startup behavior
Closed
#757 [Bug] Tailscale Exit Node DNS Doesnt Provide DNS
Closed
#758 [Feature] Headscale policy set validate ACL before applying?
Closed
#759 [Bug] Feature request form
Closed
#754 [Bug] ipv4 range not used
Closed
#756 [Bug] Self-built DERP server cannot obtain delay information
Closed
#755 tailscale-private | 2024/08/04 15:49:08 control: NetInfo: NetInfo{varies=true hairpin= ipv6=false ipv6os=true udp=true icmpv4=false derp=#900 portmap= link="" firewallmode="ipt-default"}
Closed
#751 [Bug] expiring a node does not update the online status
Closed
#752 [Bug] API does not return tags for a node
Closed
#753 [Bug] API backfillips call fail
Closed
#748 [Bug] 0.23.0-beta1 wipes resolv.conf on clients regardless of dns_config
Closed
#749 [Feature] Add SafeSurfer DoH
Closed
#750 [Bug] tailscale on ios cannot connect to the postgresql server
Closed
#745 [Bug] 0.23.0-beta1 breaks DNS custom nameservers
Closed
#746 [Bug] v0.23.0-beta1 breaks built-in DERP
Closed
#747 [Bug] ACL policy not working after update to v23.0 beta1
Closed
#742 [Feature] Add ExecReload to systemd service
Closed
#743 [Feature] add support for payments via stripe
Closed
#744 [Feature] migrate node
Closed
#739 [Bug] lastSeen not updating, causing ephemeral nodes to be incorrectly removed
Closed
#741 [Feature] allow environment variables in config file also in postgresql config
Closed
#736 New release?
Closed
#737 [Bug] API inconsistencies
Closed
#738 [Feature] Benchmarking PostgreSQL vs. SQLite for Large-Scale VPN Networks Using Headscale
Closed
#733 [Feature] OIDC with permanent ID
Closed
#734 [Bug] TLS internal error when attempting to login
Closed
#735 [Feature] Add option to associate an api key to a specific user
Closed
#730 [Feature] Use SQLite in WAL mode by default
Closed
#731 [Bug] GetDERPMap tls failed to verify certificate
Closed
#732 [Bug] Insecure TLS Configuration in Headscale creating
Closed
#727 [Feature] OIDC DisplayName and ProfilePicURL support
Closed
#728 [Feature] provide docker containers with two standard tags "latest" and "production"
Closed
#729 [Bug] Method Hosts.UnmarshalYAML does not add CIDR notation
Closed
#726 [Bug] Issues with OIDC, Authelia and Nix Agenix together
Closed
#724 Inter-controlplane federation
Closed
#721 [Bug] Node Connection Issues(~600 nodes) in v0.23.0-alpha12
Closed
#722 headscale docker keep restarting
Closed
#723 [Bug] systemctl stop headscale is very slow!
Closed
#718 [Feature] Improve docu development
Closed
#719 [Bug] dns_config.domains only works if override_local_dns is enabled
Closed
#720 [Bug] Can't always connect to Heascale through data (lte/4g) without passing via wifi first
Closed
#715 [Bug] ACL can't work with netmask smaller than /24
Closed
#716 [Bug] v0.23 does not work with PostgreSQL
Closed
#717 [Bug] ACLs although going one way, are discoverable by the "dst".
Closed
#712 [Bug] Unstable tailscale client Integration Test fails
Closed
#713 [Bug] Unify integration test docker
Closed
#714 [Feature] Support for derp's verify-client-url
Closed
#711 [Feature] Restricted nameservers without search domains
Closed
#710 [Bug] macOS unable to connect, node has an open stream(..), rejecting new stream
Closed
#706 [Question] What happened to headscale_last_update_seconds ?
Closed
#707 Received error: control server is too old; no noise key
Closed
#708 [Bug] Tailscale doesn't connect after phone reboot with Tailscale connection on
Closed
#704 [Bug] Minor issue, where headscale thinks alpha9 is newer than alpha11
Closed
#703 [Bug] restricted_nameserver is configured containing custom DNS records, clients do not resolve correctly
Closed
#701 [Bug] panic: public key moved between nodeIDs (dup node entry)
Closed
#700 [Bug] latest upstream version is wrongly detected
Closed
#697 [Bug] Tailscale Android beta app doesn't create routes when using Headscale
Closed
#698 alpha9 takes 90 seconds to stop
Closed
#699 [Bug] OIDC not working with Authentik > 2024.2?
Closed
#694 Missing Metrics for last machine contact
Closed
#695 Likely ACL regression in 0.23-alphas
Closed
#696 Headscale logs in user A with user B's auth key
Closed
#692 headscale crashes after what seems a successful start - latest master, alpha6,7+8
Closed
#693 Integration tests for database migrations
Closed
#688 Headscale crash with unknown cause
Closed
#690 CA Certificates missing
Closed
#689 acl documentation inaccurate parameter
Closed
#685 Segmentation Fault on OpenBSD 7.5
Closed
#686 Implement OIDC Group support for Google Workspace (was GSuite) issuer/provider
Closed
#687 no public network Endpoints
Closed
#684 preauthkeys: Allow specifying key material
Closed
#682 Cannot get nodes: context deadline exceeded returns 0 exit code and wrong stderr output
Closed
#683 Add documentation about using the same machine as client and server
Closed
#680 Cannot Set forcedTags to Empty Array via API or CLI
Closed
#681 When already-expired node is set to "Never Expire" (expiry is NULL), it does not go back to logged-in status.
Closed
#676 Wildcard DNS-Records
Closed
#677 Unclear sentences in documentation about ACLs
Closed
#678 Building error！
Closed
#673 Some Permission denied by ACL when same tags on a couple of clients
Closed
#674 Request for Configuration of --verify-clients Parameter in Built-in DERP
Closed
#675 Extra Records configuration changed in alpha5 to require subnet?
Closed
#670 Headscale exit node route needs to be reenabled every time a client advertises exit node
Closed
#671 Docubuild fails
Closed
#672 Rework IP fields in database
Closed
#667 Request: Guidance on Disabling IPv6 Address Functionality
Closed
#668 Tailscale connection fails in both Docker container and new LXC container on Proxmox
Closed
#669 Update notice breaks JSON output
Closed
#664 Error: unknown command "headscale" for "headscale" Running headscale in a container
Closed
#665 Question: On the reason for not encouraging container and reverse proxy usage
Closed
#666 Add "x-tailnet" ACL src/dst type
Closed
#661 Node with empty disco_key in DB prevents to start headscale
Closed
#662 headscale 0.23.0-alpha5 ignores /32 masks in ACLs
Closed
#663 Default to a FilterDenyAll instead of tailcfg.FilterAllowAll if no acl policy defined
Closed
#658 Shoehorn PSK-based authentication to provide key rotation and stronger identity guarantees
Closed
#659 Docker Hub: No tag 'headscale:latest' anymore
Closed
#660 -
Closed
#655 Cant get to Container Console in latest alpha5 after Updated from latest stable
Closed
#656 When the acl.yaml file is modified, does it need to restart the headscale service to take effect?
Closed
#652 Headscale removes node after it was re-added
Closed
#653 Allow multicast traffic to flow through the network
Closed
#654 headscale preauth create writes warnings to stdout
Closed
#649 Linux != Only Ubuntu & Debian
Closed
#651 "Did not find expected key" on clean config
Closed
#646 Servers IBM AIX powerpc
Closed
#647 Reducing filter rules breaks exit node access
Closed
#648 Benchmarks
Closed
#643 Impossible to change server URL on firetv stick
Closed
#644 improve error message and document that the ipv6 prefix is now required
Closed
#645 Backend Error: invalid key: unable to validate API key when trying to auth clients using preauthkeys
Closed
#640 Headscale container keeps restarting
Closed
#641 Document ports used
Closed
#642 Sqlite and Sqlite3 db types fail to start with "out of memory" on v0.23.0-alpha4
Closed
#639 headscale crashes with OOM when sqlite path is ommited
Closed
#637 Config is not migrated properly
Closed
#638 v0.23.0 image tag available on Docker but not on project
Closed
#634 Device approval
Closed
#635 LastInsertId is not supported by Postgres
Closed
#636 Migration eventually incomplete: last_successful_update part of 0.23.0-alpha3 SQLite dump, but not of newly initialised PostgreSQL nodes table schema
Closed
#631 Ephemeral nodes no longer correctly expire
Closed
#632 Status update is done when only LastSeen is changed
Closed
#633 Verify all database connections are closed when process is killed
Closed
#628 Doc request: Expected renewal behavior for autocert
Closed
#629 ACLs ?
Closed
#630 Node key rotating
Closed
#625 headscale server list nodes ,one node display offline,but other node
Closed
#626 about acl
Closed
#627 Preauthkey table reusable column is incorrect
Closed
#622 Split TLS options for gRPC and HTTP
Closed
#623 Unable to create private key on first run.
Closed
#620 port knocking in front of headscale server?
Closed
#621 Tailscale client logout with OIDC reconnect does not work (Linux and iOS clients)
Closed
#618 Add support for form_post OIDC callbacks
Closed
#619 route failover considers disabled routes as new primaries
Closed
#616 OIDC client secret containing whitespace when read from file
Closed
#617 OIDC Tailscale logout prevents future logins - unless node is manually deleted and node ID is incremented
Closed
#613 Two nodes appear repeatedly
Closed
#614 Headscale CLI reaching out to Github servers on every request
Closed
#610 Unable to connect to headscale
Closed
#611 Use Authorization in Swagger UI with SecurityDefinition in .swagger.json
Closed
#612 Support for 2fa?
Closed
#607 Add custom STUN responses
Closed
#608 OIDC reauthentication hangs
Closed
#609 config-example.yaml is missing private key path
Closed
#604 Expired nodes error
Closed
#605 Registering a node with --advertise-tags flag causes table corruption
Closed
#606 Add "delete" to the 'apikey' command
Closed
#601 Incorrect example path in ACL documentation
Closed
#602 When using embedded DERP server, how to verify the client
Closed
#603 override_local_dns dosent work on maos
Closed
#598 Advertising and existing pre-authorised route does not enable it
Closed
#599 Headscale stops accepting connections after ~500 nodes (likely 512) (0.23-alpha2)
Closed
#600 Expire a used key
Closed
#595 Dosn't work with webvm.io
Closed
#597 Get Version from API
Closed
#592 Integration test for database migrations
Closed
#593 Installation error
Closed
#594 Expiry information does not seem to be propagated correctly
Closed
#589 node in exit-node mode not forwarding traffic to same network which belongs external interface
Closed
#590 Let's Encrypt / ACME
Closed
#591 Wrong API call will cause headscaled down
Closed
#586 the same user can synchronize the clipboard
Closed
#587 Can't bind to IPv6 with grpc_listen_addr
Closed
#588 Main branch - server cannot connect to itself
Closed
#585 Add support for web client check mode
Closed
#583 failed to read or create private key
Closed
#584 headscale version
Closed
#582 ACLs not working with IPV6 (reopening of #809)
Closed
#580 Print nodes in registration cache
Closed
#581 Subnet router ACL's broken on 0.23.0-alpha1
Closed
#577 Removing an ACL is not pushed out to clients
Closed
#578 ACL Documentation error
Closed
#579 headscale-node shows offline
Closed
#574 rule could not be enabled
Closed
#575 4via6subnetrouter not working
Closed
#576 I have set up two users. But the computers in the two users can still communicate with each other. Am I setting it wrong?
Closed
#571 Too many open connections with Postgres server
Closed
#572 Assign a fixed node to a preauthkey connection attempt
Closed
#573 Windows clients do not respect DisableLogTail set by Headscale
Closed
#568 The headscale node status displays an error, showing offline but actually online.
Closed
#569 Tailscale is unable to connect to the specified port.
Closed
#570 API interface for start preauthkeys not set expiration properly
Closed
#565 headscale server stopped answering after a day of uptime despite listening of all the ports
Closed
#566 Headscale service restart timing out
Closed
#567 "TRC DNS configuration loaded" logs always printed to STDOUT
Closed
#562 Let's encrypt not reissuing certificates
Closed
#563 Add ability to annotate and delete preauth keys over time
Closed
#564 Outdated or confusing documentation regarding ACLs ?
Closed
#560 Does headscale support autogroup?
Closed
#561 fail to run headscale serve
Closed
#559 Bugs related to state change in #1492
Closed
#557 Interface-specific DNS not set if not overriding local nameserver
Closed
#558 How to have a reusable preauth key that does not expire?
Closed
#556 Connection prompt version warning
Closed
#555 when use embedded DERP server, there are a lot of identical logs with "named node xxx no address" in tailscaled
Closed
#550 zerolog panics "index out of range"
Closed
#551 【Function Request】 Headscale interface outputs a list of devices based on ACLs.
Closed
#552 Tailscale client v1.48.x: Multiple instances of routes in headscale and --exit-node advertisement dns name not working
Closed
#547 GRPC response codes not explicitly set for all errors
Closed
#548 Headscale keeps repeating prompts that there are no logs with nodekey present。
Closed
#549 Steps to make headscale production ready
Closed
#546 Please release a Headscale module for pfSense
Closed
#545 How to change standard port with script?
Closed
#541 command ping higher not match command Tailscale ping
Closed
#543 Simplify SSL Certificates Handling for Tailscale's serve Command by Replacing Dot with Dash in Machine.GetFQDN
Closed
#538 Feature: kubernets operator for headscale
Closed
#539 Bug in user switching during OIDC authentication
Closed
#540 fail2ban rule for API?
Closed
#537 Log(WARN) interferes with "--output json".
Closed
#535 When does derp.yaml support the InsecureForTests configuration item
Closed
#536 Logout endpoint OIDC
Closed
#532 /key?v=65 unsupported protocol scheme
Closed
#533 Headscale setup oidc with Authelia not work
Closed
#534 Fallback NXDOMAIN MagicDNS records to defined nameservers
Closed
#529 Vulnerability of dependency "github.com/gin-gonic/gin"
Closed
#530 restricted_nameservers resolution fails when --accept-routes is false
Closed
#531 Ability to reload headscale in docker container
Closed
#526 When does derp.yaml support the InsecureForTests configuration item
Closed
#527 Nodes drop from map poll.
Closed
#528 Frequent "offline" status causing subnet router re-election and connection disruptions
Closed
#523 Allow DNS wildcards in config
Closed
#524 Derb error on startup
Closed
#525 node with tailscale 1.44.0 can't connect to other node.
Closed
#520 [minor Bug] ephemeral_node_inactivity_timeout (3d) is set too low
Closed
#522 How to fix the tunnel address of a device (100.64. *. *)
Closed
#521 Orphaned routes accumulating in the routes table
Closed
#517 kubernetes integration
Closed
#518 Stop using gorilla mux
Closed
#519 How to customize the registration authentication page
Closed
#514 [Code Freeze] Restructuring the code
Closed
#515 Usage issues
Closed
#516 ACLs don't properly handle users
Closed
#513 Purpose of non-standard POST method in Websocket handshake?
Closed
#511 tailscale setup migration?
Closed
#512 Long time to establish first ping
Closed
#508 After updating to 0.22.2, headscale refuses let's encrypt certificates
Closed
#509 Difficult login on windows
Closed
#510 Strange shutdown/restart behavior on 0.22.2
Closed
#505 Catch sync group errors in integration tests
Closed
#506 Updating to 0.22.2 causes all devices to see each other, regardless of ACLs
Closed
#507 After update to 0.22.2 port 41461 gets blocked by ufw on clients
Closed
#504 Custom/change IP address
Closed
#502 Reduce failover time for subnet routers in HA setup
Closed
#503 Registry override does not work, still generates official registration link
Closed
#499 DERP map not loaded from path
Closed
#500 [Missing documentation] Security considerations – what if Headscale server gets compromised?
Closed
#501 FR: Pull embedded DERP server URL from client request
Closed
#496 Wrong unix_socket in example config
Closed
#497 Cannot get it run on my vps
Closed
#498 ip_prefixes cannot be displayed properly
Closed
#493 Allow OIDC tokens for API request
Closed
#494 TLS handshake remote error: tls: bad certificate
Closed
#495 Support of Tailscale ACL node attributes
Closed
#490 segmentation fault without logs
Closed
#491 0.22.1 uses way, way more memory than 0.21?
Closed
#492 logout node expired but not deleted
Closed
#487 CertManager's 10s TLS handshake error EOF
Closed
#488 Bug: peers not notified of deletion when 2 nodes in network
Closed
#489 FR: Send Peers delta in MapResponse
Closed
#485 Headscale does not start with large networks in ACLs
Closed
#486 Peering/federating between headscale instances
Closed
#484 chore: move components in separate packages
Closed
#483 Remove v0.23.0 Docker Tag
Closed
#481 Tagged devices should not have access permissions of their owning user
Closed
#482 No RPM packages?
Closed
#478 headscale.service location
Closed
#479 API for adding Extra Domain Records
Closed
#480 How to use commands to upgrade headscale to 0.22.0
Closed
#475 ACLs with multiple users do not work
Closed
#476 Exit node appears on windows only when both ipv4 and ipv6 0/0 routes are enabled
Closed
#477 Tailscale status strange IP display
Closed
#472 Homebrew formula for macOS CLI releases
Closed
#473 failed to set up a HTTP server error="listen tcp :80: bind: permission denied"
Closed
#474 Upgrade path from Binary to .deb / .rpm
Closed
#469 ACL forbidden subnet routes should not be routed
Closed
#470 Need help compiling for arm
Closed
#471 Windows client guide seems outdated
Closed
#467 What specific services does 'embedded DERP (and STUN) server' provide
Closed
#466 Can you provide the official standard 'docker composite. yml' file？
Closed
#468 Synology support?
Closed
#463 Unable to disable Headscale from using Tailscale DERP nodes
Closed
#464 Generic DoH/DoT (DNS-over-HTTPS/DNS-over-TLS) Support
Closed
#465 Preauth keys for different users
Closed
#460 Need help/clarification regarding MagicDNS + TLS
Closed
#461 Cannot register machine: machine not found in registration cache
Closed
#457 ACL issue: specifing CIDR from subnet doesn't work
Closed
#458 Documentation improvement
Closed
#459 Unable to ssh with tailscale
Closed
#454 ERR noise upgrade failed error="noise handshake failed: decrypting machine key: chacha20poly1305: message authentication failed
Closed
#455 Better Docker Support PR
Closed
#456 suspected bug with ipv4/ipv6
Closed
#453 custom device login page
Closed
#451 Users that don't belong to any ACL can access the whole network
Closed
#452 registration fails silently with long machine hostname
Closed
#450 make api support cors
Closed
#448 acl support hot reload and acl http api
Closed
#449 route 0.0.0.0/0and::/0 enable/disable action
Closed
#446 iOS does not take custom Coordination URL into account
Closed
#447 Quickstart script
Closed
#445 IPv6 exit node ACL not working
Closed
#443 Equipment insulation
Closed
#444 get-authkey example
Closed
#442 [docs/server,sqlite] Locked database, likely due to SystemD unit
Closed
#440 I hope that the next version can integrate self-checking derp, and can be accessed through ip, and is compatible with http/https protocol
Closed
#441 headscale can ping through different namespaces
Closed
#439 Headscale logs bearer tokens
Closed
#436 scale 启动失败
Closed
#437 Support "configtest" to verify configuration and ACLs.
Closed
#438 Deleting a node does not delete the associated route entry (v0.20.0)
Closed
#433 error decoding RegisterResponse with server key
Closed
#434 A small tip about dependency "github.com/ccding/go-stun/stun"
Closed
#435 n/a
Closed
#430 Documentation issues
Closed
#431 IP address mask /32 causes issues with dnsmasq
Closed
#432 Does headscale support OCSP stapling?
Closed
#427 Is it possible to host headscale on serverless platforms?
Closed
#428 Private key not creating
Closed
#429 Unable to run in linux background using headscale.service
Closed
#424 Expose more machine info via api
Closed
#425 Keycloak no longer supports redirect_uri
Closed
#426 DNS extra_records don't work with Split DNS and a client capable of natively doing Split DNS
Closed
#421 client_secret_path: cli.initConfig: SIGSEGV
Closed
#422 OAuth Provider + Tailscale Kubernetes operator compatibility
Closed
#423 private.key: no such file or directory
Closed
#418 You can specify a specific IP for the client by modifying the "db.sqlite" data
Closed
#419 OIDC configure expiry time
Closed
#420 user_id column within machines table are not migrated from the namespace_id column after upgrade to 0.19.0-beta1
Closed
#415 MachineKey not displayed for some nodes when listing nodes from CLI
Closed
#417 Split DNS behaviour differs from tailscale's
Closed
#416 MagicDNS issues with systemd resolver configuration and Docker containers (Ubuntu)
Closed
#412 Have to reconnect Tailscale on Android now and then to resolve custom DNS records
Closed
#413 Support install headscale with helm to kubernetes cluster
Closed
#414 add --verify-clients option to embedded DERP server as tailscale derper support it
Closed
#409 Cache getMapResponseData
Closed
#410 Nologin is on a different path in Debian and derivatives
Closed
#411 Data race in pollNetMapStream()
Closed
#406 [feature] Support running under a HTTP path
Closed
#407 [feature] Update details nginx / reverse proxy example
Closed
#408 [OIDC] Plans about Known limitation
Closed
#403 [OIDC] Allowed_groups directive issue
Closed
#404 namespace.basedomain.xyz cannot resolve any nameserver provided by a third-party DNS provider
Closed
#405 headscale_0.18.0-beta2 cannot open the exit node
Closed
#397 Using the “curl http://xxx:8080/apple/macos” command, an error "Invalid platform, only ios and macos is supported" is reported
Closed
#398 Routes are not propagated in v0.18.0-beta1
Closed
#399 tailscale 1.34.1 can't login to headscale 0.17.1
Closed
#400 Headscale tab completion funky behaviour
Closed
#401 Better name resolution for CNAME records
Closed
#402 Remove ephemeral nodes immediately upon logout
Closed
#394 Clients from different namespaces can ping each other.
Closed
#396 Donations
Closed
#391 Integrate pull request preview environments
Closed
#392 the same server,client 1.34.0 fail register. but client 1.24.2-dev success.
Closed
#393 Unable to install
Closed
#388 Split DNS only works sporadically
Closed
#389 Logout and login back got different IP address
Closed
#390 Suspected bug with ip_prefixes
Closed
#387 Plans to implement Funnel?
Closed
#385 Add db_ssl as mandatory to v0.17 release notes under the breaking section, or default it to false, when using a pg database
Closed
#386 using exit node isolated myself
Closed
#383 Hide other namespaces
Closed
#382 Webpage not reachable via port 8080 when using docker
Closed
#384 Magic DNS and AAAA records pointing at IPv6 addresses of nodes in dual-stack tailnet
Closed
#380 Subnet router networks wide open
Closed
#381 Expotential CPU usage from allowed peer checks
Closed
#379 Unable to download macos-standalone profile due to misspell
Closed
#376 Update message breaks bash completion
Closed
#377 headscale post-launch link 3.121.104.141:443
Closed
#378 --snat-subnet-routes=true not work
Closed
#373 Out of sync with local time zone
Closed
#374 What are the security risks of providing services with the http protocol on the public Internet
Closed
#375 bash, dash ash or whatever shell on docker container
Closed
#370 Feature Request: Random IP Address Assignment
Closed
#371 Make headscale console ANSI output optional
Closed
#372 Temporary failure in name resolution
Closed
#367 ACL src/dst with host-alias not working
Closed
#368 Support NextDNS DoH resolver
Closed
#369 Failed to set up gRPC socket | permission denied
Closed
#365 Option to use Username instead of email when logging in via oidc
Closed
#366 Headscale can not connect to postgresql with SNI in used.
Closed
#364 Implement Key Expiry
Closed
#361 Headscale's config file is garbled after being downloaded from github
Closed
#362 Cannot login/register with Tailscale Windows client
Closed
#363 failed to bind to TCP address: listen tcp 0.0.0.0:4000: bind: address already in use
Closed
#358 Bug during registration new macos node
Closed
#359 /home/runner/work/headscale/headscale/cmd/headscale/cli/utils.go:122
Closed
#360 Registering new nodes with offline private key
Closed
#357 OIDC returns empty namespace if id_token doesn't contain email
Closed
#355 Logging to file
Closed
#356 Can't register a machine via HTTP API (if logged out?), only via gRPC/CLI
Closed
#354 Cannot connect to the embeded DERP when running headscale behind a reverse proxy
Closed
#352 Logging HTTP API endpoint
Closed
#353 Integration tests v2
Closed
#349 Mac Cannot register machine: machine not found in registration cache
Closed
#350 Cannot Decode Message
Closed
#351 Namespace borders not applied by default
Closed
#346 Running with no args produces panic
Closed
#347 tailscale client cannot register/login when setup headscale behind istio
Closed
#348 ARM support
Closed
#343 tailscale file cp , cause 502 Bad Gateway
Closed
#344 Usage of OIDC groups claim
Closed
#345 MagicDNS without DNS nameservers
Closed
#341 Version output in completion script
Closed
#342 Default isolation of namespaces via config parameter
Closed
#340 Log flood
Closed
#337 log.tailscale.io DNS queries
Closed
#338 Headscale says OIDC setup failed on success when only-start-with-OIDC is enabled
Closed
#339 Allow SQLite to be defined as URL / with paramters
Closed
#335 Support Split DNS
Closed
#336 tls_client_auth_mode Documentation Question
Closed
#334 Unable to bring headscale up if OIDC is down
Closed
#331 help me derp
Closed
#332 Generate TLS certs on integration tests
Closed
#333 Unique constraint failed on namespace name when registering clients using OIDC
Closed
#329 How do I know if clients are really connected directly
Closed
#330 Problem with inter-headscale communication due to missing noise key.
Closed
#328 Various ACL rules not working
Closed
#325 Potential channel leak
Closed
#326 Identifying remote client ip
Closed
#327 How to use routes? In Android for example.
Closed
#323 Is IPv6 subnet route (4via6) support?
Closed
#324 tailscale GUI on macOS doesn't display exit nodes from headscale
Closed
#322 Several connections issues
Closed
#319 v0.17.0-alpha2 doesn't serve on 443
Closed
#320 Update buf googleapis reference
Closed
#321 Tailscale client fails to connect
Closed
#316 ERR noise upgrade failed error="no next protocol in HTTP request"
Closed
#317 Optional random node suffixes.
Closed
#318 acme/autocert: missing certificate
Closed
#313 Add support for host aliases when using MagicDNS?
Closed
#314 Headscale fails to activate clients with postgresql backend
Closed
#315 How to add subnet routing? "route is not available on machine"
Closed
#312 OIDC auth in 0.16.2 fails with "Failed to decode id token claims"
Closed
#310 Support Postgres TLS
Closed
#311 Machines cannot register again after logging out
Closed
#307 connect postgres through a unix socket
Closed
#308 Api tls on and off function and single/multiple allowed access netmask or ip
Closed
#309 add --verify-clients environment variable to docker version
Closed
#306 Implement long poll for interactive login
Closed
#301 You can change the coordination server on the android client
Closed
#304 Yunohost app
Closed
#305 0.16 panic: go 1.19 go4.org/unsafe/assume-no-moving-gc
Closed
#302 Upgrading from 0.16 beta 5 to 0.16 (release) - constant messages about adding new nodes?
Closed
#303 Adding capability to update ACLs via REST API
Closed
#298 Fails to build from source on 32-bit platforms
Closed
#299 dst:"*:*" not working in ACLs
Closed
#300 Support disableIPv4 network policy option
Closed
#295 Make server errors exported
Closed
#296 Only distribute split dns entries when the corresponding route is available
Closed
#297 Sporatic DNS Failures
Closed
#293 a confuse that half flow/bandwidth has been wasted by unknow reason
Closed
#294 headscale version gives unexpected output
Closed
#292 Regression in HTTP API for 0.16.0-beta5
Closed
#290 Container's embedded DERP only has STUN port
Closed
#291 cannot decrypt response
Closed
#289 Env var for config location
Closed
#286 Stopping via systemd leads to kill after timeout
Closed
#287 Windows tailscale client - NodeKey regeneration not supported
Closed
#288 failed to read or create private key: failed to parse private key: key hex has the wrong size, got 44 want 64
Closed
#283 Allow to specify initial API key as a flag for serve command
Closed
#284 Local DNS resolution doeesn't work on macOS with MagicDNS enabled
Closed
#285 Add SSH support to ACLs
Closed
#280 No support for "autogroup:" in ACL rules
Closed
#281 Toggle JSON logging
Closed
#282 Who can give some advice on developing IOS apps? About how to develop.
Closed
#279 Add cli command for ACL validation
Closed
#277 Segfault when running ``headscale nodes list --output json`` when backend is not running.
Closed
#278 MagicDNS Enable will cause clients can't discover each other.
Closed
#275 Issue with the containers release
Closed
#276 [Not bug, but Enhancement]Rename Machine won't change the name's record in [nodes ls]
Closed
#274 Version sub command always shows "dev"
Closed
#273 v0.16.0-beta2 crashes immediately on Ubuntu 21.10
Closed
#271 Random suffix added to node names in DNS
Closed
#272 Handle CORS headers and OPTIONS method for HTTP API
Closed
#269 Support new ACL format
In february tailscale added src and dst field for ease of use on users and ports respectively
Closed
#270 After adding IPv6 prefix in config, existing machines don't get IPv6 addresses
Closed
#268 Machine namespace not changed after logout and reauth
Closed
#267 Add ACL management via API
Closed
#265 Machine waiting for OIDC auth is spamming the server with requests
Closed
#266 Multi server support
Closed
#264 ACLs don't work with host aliases or wildcard sources
Closed
#262 Let's Encrypt certificates for clients
Closed
#263 Fix scalability issues affecting the integration tests
Closed
#261 bug in function excludeCorrectlyTaggedNodes()
Closed
#259 Any plans to add option to disable key expiry?
Closed
#260 How to setup an unstrusted private Derper
Closed
#256 Derp implementation, propagation, status, and an issue with ip assignment
Closed
#257 Set MapResponse.Debug.DisableLogTail
Closed
#258 OpenID Connect: scopes, custom parameters and domain filter
Closed
#253 Headscale shouldn't start if ACL policy is wrong
Closed
#254 Defining a derp server (and removing default ones) disables direct connection
Closed
#255 ACLs problem ( it is confuse about my ACLs can not working well)
Closed
#250 Create a Matrix Chat room
Closed
#251 客户端注册疑问
Closed
#252 Headscale Discord link invalid
Closed
#247 Manually add tags to nodes from headscale
Closed
#248 Getting headscale to work with Docker-Compose and Traefik
Closed
#249 Proposal: Implement TS2021 (Tailscale control protocol v2)
Closed
#246 The client cannot regenerate the registration key
Closed
#244 headscale exit node
Closed
#245 Running headscale commands as non-root produces generic "deadline exceeded" error message
Closed
#241 Changing the log level doesn't appear to change the actual log level
Closed
#242 OIDC: failure to reconnect a node after logout due to Machine registration expired
Closed
#243 Profile doesn't work for the Tailscale iOS Client?
Closed
#238 Toggleable /swagger, /windows and /apple endpoints
Closed
#239 expiration time unit does not parse correctly
Closed
#240 Add DNS01 Challenge
Closed
#237 Build failure on OpenBSD
Closed
#235 Print out loaded ACLs
Closed
#236 ACLs and routes
Closed
#234 Dependency Dashboard
Closed
#231 Dependency Dashboard
Closed
#232 Tailscale client fails to re-authenticate using an auth key after logout
Closed
#233 Embeded DERP server with NGiNX
Closed
#228 Dependency Dashboard
Closed
#229 Dependency Dashboard
Closed
#230 Dependency Dashboard
Closed
#223 Dependency Dashboard
Closed
#224 Dependency Dashboard
Closed
#225 Dependency Dashboard
Closed
#226 Dependency Dashboard
Closed
#227 Dependency Dashboard
Closed
#219 Dependency Dashboard
Closed
#220 Dependency Dashboard
Closed
#221 Dependency Dashboard
Closed
#222 Dependency Dashboard
Closed
#216 Dependency Dashboard
Closed
#217 Dependency Dashboard
Closed
#218 Dependency Dashboard
Closed
#212 Dependency Dashboard
Closed
#213 Dependency Dashboard
Closed
#214 Dependency Dashboard
Closed
#215 Dependency Dashboard
Closed
#211 Dependency Dashboard
Closed
#207 Dependency Dashboard
Closed
#208 Dependency Dashboard
Closed
#209 Dependency Dashboard
Closed
#210 Dependency Dashboard
Closed
#205 Dependency Dashboard
Closed
#206 Dependency Dashboard
Closed
#202 Dependency Dashboard
Closed
#203 Dependency Dashboard
Closed
#204 Dependency Dashboard
Closed
#201 Dependency Dashboard
Closed
#197 Dependency Dashboard
Closed
#198 Dependency Dashboard
Closed
#199 Dependency Dashboard
Closed
#200 Dependency Dashboard
Closed
#195 Dependency Dashboard
Closed
#196 Dependency Dashboard
Closed
#193 Dependency Dashboard
Closed
#194 Dependency Dashboard
Closed
#190 Dependency Dashboard
Closed
#191 Dependency Dashboard
Closed
#192 Dependency Dashboard
Closed
#188 Dependency Dashboard
Closed
#189 Dependency Dashboard
Closed
#184 Dependency Dashboard
Closed
#185 Dependency Dashboard
Closed
#186 Dependency Dashboard
Closed
#187 Dependency Dashboard
Closed
#182 Dependency Dashboard
Closed
#183 Dependency Dashboard
Closed
#180 Dependency Dashboard
Closed
#181 Dependency Dashboard
Closed
#177 Dependency Dashboard
Closed
#178 Dependency Dashboard
Closed
#179 Dependency Dashboard
Closed
#175 Dependency Dashboard
Closed
#176 Dependency Dashboard
Closed
#172 Dependency Dashboard
Closed
#173 Dependency Dashboard
Closed
#174 Dependency Dashboard
Closed
#169 Dependency Dashboard
Closed
#170 Dependency Dashboard
Closed
#171 Dependency Dashboard
Closed
#166 Dependency Dashboard
Closed
#167 Dependency Dashboard
Closed
#168 Dependency Dashboard
Closed
#163 Dependency Dashboard
Closed
#164 Dependency Dashboard
Closed
#165 Dependency Dashboard
Closed
#160 Dependency Dashboard
Closed
#161 Dependency Dashboard
Closed
#162 Dependency Dashboard
Closed
#157 Dependency Dashboard
Closed
#158 Dependency Dashboard
Closed
#159 Dependency Dashboard
Closed
#156 Dependency Dashboard
Closed
#154 Dependency Dashboard
Closed
#155 Dependency Dashboard
Closed
#151 Dependency Dashboard
Closed
#152 Dependency Dashboard
Closed
#153 Dependency Dashboard
Closed
#149 Dependency Dashboard
Closed
#150 Dependency Dashboard
Closed
#145 Limitations in the ACLs current implementation of * in users
Closed
#147 Incorrect spelling of TLS ACME challenge
Closed
#148 ACLs with Action's using tags where no nodes with that tag don't parse.
Closed
#146 writing ACLs with namespace without nodes is an error
Closed
#142 Email in ACL's groups should be emails
Closed
#143 oidc username/email to create new namespace mapping is broken
Closed
#144 Linter Fails
Closed
#139 Macos profile in /apple XML is not formatted correctly
Closed
#140 Add command to move nodes between namespaces
Closed
#141 MagicDNS doesn't register hostnames with upper-case letters
Closed
#136 Add --all (-a) flag to enable routes command
Closed
#137 Should "namespace" or "user" be a part of the MagicDNS?
Closed
#138 Add short hand aliases for named commands
Closed
#133 Dependency Dashboard
Closed
#134 failed to read or create private key
Closed
#135 View Tags
Closed
#130 Investigate not writing a machine to DB until registered
Closed
#131 panic: send on closed channel
Closed
#132 /metrics is accessible open wide
Closed
#128 Windows equivalent to /apple
Closed
#129 Contributor Action broken
Closed
#127 Trusted self-signed certificate can't be used connecting to OIDC server
Closed
#124 OIDC connect with Google - Debug a 400's
Closed
#125 Remove the concept of "shared machine/node"
Closed
#126 Rename Namespace to User
Closed
#122 Allow ACLs to be written as YAML
Closed
#121 Replace oidc.domain_map with email to namespace
Closed
#123 Use renovatebot to update dependencies
Closed
#119 Unable to set expiration time for preauth key in days
Closed
#120 Donations
Closed
#118 Issues in kustomize example
Closed
#115 Retained rows in shared_machines may cause nodes to be accidentally shared later on.
Closed
#116 VPN Fails (no SSH/Ping) in windows 10 devices after restart or logging off
Closed
#117 New hosts are not computed in ACL's
Closed
#112 SOCKS5
Closed
#113 Can mobile clients use the WireGuard app?
Closed
#114 Header-based authentication in lieu of mTLS
Closed
#111 Most subcommands depend on configuration file
Closed
#109 Machine allocation logic exists in multiple locations.
Closed
#110 Multiple IP prefixes: All machine addresses are stored in a single column.
Closed
#108 Strip whitespace from private.key before parsing
Closed
#106 Docker image cmd = headscale
Closed
#107 Add command line option to generate the private key
Closed
#105 How to connect a client that uses the web interface
Closed
#103 Make Unix Socket permissions configurable
Closed
#104 Make configuration file path overridable by CLI/Env
Closed
#101 Override local DNS option for Pihole and Adguardhome?
Closed
#102 How to set derp servers port in derp.yaml ?
Closed
#100 Is there a way to map an email to the namespace(whose value is the email string) automatically?
Closed
#99 From readme, I can see that there is already a Windows client, but I can't find the place to download it
Closed
#97 Do i need to install the tailscale client on the headscale host to get access to the local network devices?
Closed
#98 Published docker images not works
Closed
#94 Groups in ACL
Closed
#95 Remove old routes
Closed
#96 How to set alternative IP ranges ?
Closed
#91 not able to register node
Closed
#92 Release arm64 docker optimization
Closed
#93 client need certificate?
Closed
#88 Question about ACL
Closed
#89 Docker releases appear out of sync with the code releases?
Closed
#90 create namespace error : ephemeral_node_inactivity_timeout
Closed
#85 Error initializing: open : no such file or directory
Closed
#86 failed to save private key to disk: open : no such file or directory
Closed
#87 Are subnet routers supported in headscale?
Closed
#84 Create changelog, Issue and PR template
Closed
#83 Exit nodes and DNS breaks in 1.18.0 (macOS)
Closed
#80 Deleted node is back online
Closed
#81 Implement Helmchart
Closed
#79 GORM errors are not checked for
Closed
#78 Terraform
Closed
#76 API key support
Closed
#77 "Your authentication has expired" in main branch
Closed
#75 Can't enroll machines if ip_prefix is an ipv6 prefix
Closed
#73 Stricter linting
Closed
#74 All internal calls must go via rpc layer
Closed
#71 Deleting a namespace will not remove its preauthkeys
Closed
#70 support Proxy to get ip from a http Header instead from source IP (127.0.0.1)
Closed
#72 can't check the mac device's name
Closed
#68 ERR Could not load DERP servers map file error="open : no such file or directory" path=
Closed
#69 Integration tests timeout/deadlock
Closed
#67 Dumb question, but I'm guessing this means you can't run tailscale clients (mac/ios/etc) against a Headscale control server?
Closed
#64 no release for v0.10.6 tag
Closed
#65 Enable changing device name
Closed
#66 Nodes shared in namespace
Closed
#63 incorrect version information in container images
Closed
#61 Clean up and convert example configuration to YAML
Closed
#62 derp.yaml is out of date and European Derp Server are unavailable
Closed
#59 Add reload and test config commands
Closed
#58 helm chart?
Closed
#60 Implement Restricted nameservers / Split DNS
Closed
#57 Nodes list command returns empty namespace in authkey
Closed
#56 Delete nodes non-interactively
Closed
#55 add linux/arm64 build
Closed
#54 MagicDNS base domain clobbers valid records
Closed
#52 Preauthkeys expire help message incomplete
Closed
#53 Authkeys expire command invalid json output on error
Closed
#49 Non-reusable authkey is reusable
Closed
#50 Preauthkey used-state not present in cli
Closed
#51 Disable version check when printing result as json
Closed
#47 Invalid json when deleting nodes with -o flag
Closed
#48 shared nodes are unreachable
Closed
#46 Preauthkey date values timezone difference
Closed
#44 Nodes IP missing in tailscale status
Closed
#45 Upload build artefact after master/pr builds
Closed
#43 How to build custom tailscale android client?
Closed
#42 Crash due to number of open files
Closed
#41 Can not get the lets encrypt part to work.
Closed
#40 Delete of shared host causes 500 Errors / cli errors.
Closed
#38 Support 2FA / RADIUS or LDAP?
Closed
#39 [Github page edit request] Screenshots from Web UI
Closed
#37 Expected client polling behavior
Closed
#36 TLS / LetsEncrypt / ACME support for nodes
Closed
#34 Enable taildrop support from headscale?
Closed
#35 Multiple servers
Closed
#33 Is subnet routing supported?
Closed
#31 Could not load DERP servers map file error on Ubuntu 20.04
Closed
#32 Usage with Tailscale on MacOS
Closed
#28 Idea: make register url configurable
Closed
#29 [question] high availability support?
Closed
#30 Unable to join Headscale server, machine IP seems to be empty
Closed
#25 Dockerfile Latest Version
Closed
#26 Update channel loop bug
Closed
#27 Stale (Machine) objects are written back to database
Closed
#22 Use headscale domain from configuration in MapResponse
Closed
#23 0.6.1 SIGSEGV: segmentation violation code=0x1 addr=0x0 pc=0xd23b47]
Closed
#24 Publish Docker Containers
Closed
#19 Ability to remove Authkeys
Closed
#20 DERP packet from unknown key
Closed
#21 Detailed logs
Closed
#18 Headscale failes to acknowledge Peers (Docker)
Closed
#17 nodes command missing in v0.3.5
Closed
#16 Docker port issue or by design?
Closed
#13 Docker build fails
Closed
#14 How to turn off debug mode in headscale serve
Closed
#15 Mobile clients
Closed
#10 Ability to remove a node
Closed
#11 Allow to use letsencrypt on port other than 443
Closed
#12 Nodes connected to headscale fail to see each other if headscale is fronted by nginx
Closed
#7 best way to background the process??
Closed
#8 Error while register node
Closed
#9 Error while settingup headscale
Closed
#5 Create a namespace (equivalent to a user in tailscale.com) ???
Closed
#6 Times out
Closed
#4 headscale up - 2 nodes registered cant ping one another
Closed
#2 Add a description
Closed
#3 Improve the human-readable output
Closed
#1 anyway to collect nodes status ?
2978 Issues created by 1 user
Opened
#1 anyway to collect nodes status ?
Opened
#2 Add a description
Opened
#3 Improve the human-readable output
Opened
#4 headscale up - 2 nodes registered cant ping one another
Opened
#5 Create a namespace (equivalent to a user in tailscale.com) ???
Opened
#6 Times out
Opened
#7 best way to background the process??
Opened
#8 Error while register node
Opened
#9 Error while settingup headscale
Opened
#10 Ability to remove a node
Opened
#11 Allow to use letsencrypt on port other than 443
Opened
#12 Nodes connected to headscale fail to see each other if headscale is fronted by nginx
Opened
#13 Docker build fails
Opened
#14 How to turn off debug mode in headscale serve
Opened
#15 Mobile clients
Opened
#16 Docker port issue or by design?
Opened
#17 nodes command missing in v0.3.5
Opened
#18 Headscale failes to acknowledge Peers (Docker)
Opened
#19 Ability to remove Authkeys
Opened
#20 DERP packet from unknown key
Opened
#21 Detailed logs
Opened
#22 Use headscale domain from configuration in MapResponse
Opened
#23 0.6.1 SIGSEGV: segmentation violation code=0x1 addr=0x0 pc=0xd23b47]
Opened
#24 Publish Docker Containers
Opened
#25 Dockerfile Latest Version
Opened
#26 Update channel loop bug
Opened
#27 Stale (Machine) objects are written back to database
Opened
#28 Idea: make register url configurable
Opened
#29 [question] high availability support?
Opened
#30 Unable to join Headscale server, machine IP seems to be empty
Opened
#31 Could not load DERP servers map file error on Ubuntu 20.04
Opened
#32 Usage with Tailscale on MacOS
Opened
#33 Is subnet routing supported?
Opened
#34 Enable taildrop support from headscale?
Opened
#35 Multiple servers
Opened
#36 TLS / LetsEncrypt / ACME support for nodes
Opened
#37 Expected client polling behavior
Opened
#38 Support 2FA / RADIUS or LDAP?
Opened
#39 [Github page edit request] Screenshots from Web UI
Opened
#40 Delete of shared host causes 500 Errors / cli errors.
Opened
#41 Can not get the lets encrypt part to work.
Opened
#42 Crash due to number of open files
Opened
#43 How to build custom tailscale android client?
Opened
#44 Nodes IP missing in tailscale status
Opened
#45 Upload build artefact after master/pr builds
Opened
#46 Preauthkey date values timezone difference
Opened
#47 Invalid json when deleting nodes with -o flag
Opened
#48 shared nodes are unreachable
Opened
#49 Non-reusable authkey is reusable
Opened
#50 Preauthkey used-state not present in cli
Opened
#51 Disable version check when printing result as json
Opened
#52 Preauthkeys expire help message incomplete
Opened
#53 Authkeys expire command invalid json output on error
Opened
#54 MagicDNS base domain clobbers valid records
Opened
#55 add linux/arm64 build
Opened
#56 Delete nodes non-interactively
Opened
#57 Nodes list command returns empty namespace in authkey
Opened
#58 helm chart?
Opened
#59 Add reload and test config commands
Opened
#60 Implement Restricted nameservers / Split DNS
Opened
#61 Clean up and convert example configuration to YAML
Opened
#62 derp.yaml is out of date and European Derp Server are unavailable
Opened
#63 incorrect version information in container images
Opened
#64 no release for v0.10.6 tag
Opened
#65 Enable changing device name
Opened
#66 Nodes shared in namespace
Opened
#67 Dumb question, but I'm guessing this means you can't run tailscale clients (mac/ios/etc) against a Headscale control server?
Opened
#68 ERR Could not load DERP servers map file error="open : no such file or directory" path=
Opened
#69 Integration tests timeout/deadlock
Opened
#70 support Proxy to get ip from a http Header instead from source IP (127.0.0.1)
Opened
#71 Deleting a namespace will not remove its preauthkeys
Opened
#72 can't check the mac device's name
Opened
#73 Stricter linting
Opened
#74 All internal calls must go via rpc layer
Opened
#75 Can't enroll machines if ip_prefix is an ipv6 prefix
Opened
#76 API key support
Opened
#77 "Your authentication has expired" in main branch
Opened
#78 Terraform
Opened
#79 GORM errors are not checked for
Opened
#80 Deleted node is back online
Opened
#81 Implement Helmchart
Opened
#82 Any WEB UI planned?
Opened
#83 Exit nodes and DNS breaks in 1.18.0 (macOS)
Opened
#84 Create changelog, Issue and PR template
Opened
#85 Error initializing: open : no such file or directory
Opened
#86 failed to save private key to disk: open : no such file or directory
Opened
#87 Are subnet routers supported in headscale?
Opened
#88 Question about ACL
Opened
#89 Docker releases appear out of sync with the code releases?
Opened
#90 create namespace error : ephemeral_node_inactivity_timeout
Opened
#91 not able to register node
Opened
#92 Release arm64 docker optimization
Opened
#93 client need certificate?
Opened
#94 Groups in ACL
Opened
#95 Remove old routes
Opened
#96 How to set alternative IP ranges ?
Opened
#97 Do i need to install the tailscale client on the headscale host to get access to the local network devices?
Opened
#98 Published docker images not works
Opened
#99 From readme, I can see that there is already a Windows client, but I can't find the place to download it
Opened
#100 Is there a way to map an email to the namespace(whose value is the email string) automatically?
Opened
#101 Override local DNS option for Pihole and Adguardhome?
Opened
#102 How to set derp servers port in derp.yaml ?
Opened
#103 Make Unix Socket permissions configurable
Opened
#104 Make configuration file path overridable by CLI/Env
Opened
#105 How to connect a client that uses the web interface
Opened
#106 Docker image cmd = headscale
Opened
#107 Add command line option to generate the private key
Opened
#108 Strip whitespace from private.key before parsing
Opened
#109 Machine allocation logic exists in multiple locations.
Opened
#110 Multiple IP prefixes: All machine addresses are stored in a single column.
Opened
#111 Most subcommands depend on configuration file
Opened
#112 SOCKS5
Opened
#113 Can mobile clients use the WireGuard app?
Opened
#114 Header-based authentication in lieu of mTLS
Opened
#115 Retained rows in shared_machines may cause nodes to be accidentally shared later on.
Opened
#116 VPN Fails (no SSH/Ping) in windows 10 devices after restart or logging off
Opened
#117 New hosts are not computed in ACL's
Opened
#118 Issues in kustomize example
Opened
#119 Unable to set expiration time for preauth key in days
Opened
#120 Donations
Opened
#121 Replace oidc.domain_map with email to namespace
Opened
#122 Allow ACLs to be written as YAML
Opened
#123 Use renovatebot to update dependencies
Opened
#124 OIDC connect with Google - Debug a 400's
Opened
#125 Remove the concept of "shared machine/node"
Opened
#126 Rename Namespace to User
Opened
#127 Trusted self-signed certificate can't be used connecting to OIDC server
Opened
#128 Windows equivalent to /apple
Opened
#129 Contributor Action broken
Opened
#130 Investigate not writing a machine to DB until registered
Opened
#131 panic: send on closed channel
Opened
#132 /metrics is accessible open wide
Opened
#133 Dependency Dashboard
Opened
#134 failed to read or create private key
Opened
#135 View Tags
Opened
#136 Add --all (-a) flag to enable routes command
Opened
#137 Should "namespace" or "user" be a part of the MagicDNS?
Opened
#138 Add short hand aliases for named commands
Opened
#139 Macos profile in /apple XML is not formatted correctly
Opened
#140 Add command to move nodes between namespaces
Opened
#141 MagicDNS doesn't register hostnames with upper-case letters
Opened
#142 Email in ACL's groups should be emails
Opened
#143 oidc username/email to create new namespace mapping is broken
Opened
#144 Linter Fails
Opened
#145 Limitations in the ACLs current implementation of * in users
Opened
#146 writing ACLs with namespace without nodes is an error
Opened
#147 Incorrect spelling of TLS ACME challenge
Opened
#148 ACLs with Action's using tags where no nodes with that tag don't parse.
Opened
#149 Dependency Dashboard
Opened
#150 Dependency Dashboard
Opened
#151 Dependency Dashboard
Opened
#152 Dependency Dashboard
Opened
#153 Dependency Dashboard
Opened
#154 Dependency Dashboard
Opened
#155 Dependency Dashboard
Opened
#156 Dependency Dashboard
Opened
#157 Dependency Dashboard
Opened
#158 Dependency Dashboard
Opened
#159 Dependency Dashboard
Opened
#160 Dependency Dashboard
Opened
#161 Dependency Dashboard
Opened
#162 Dependency Dashboard
Opened
#163 Dependency Dashboard
Opened
#164 Dependency Dashboard
Opened
#165 Dependency Dashboard
Opened
#166 Dependency Dashboard
Opened
#167 Dependency Dashboard
Opened
#168 Dependency Dashboard
Opened
#169 Dependency Dashboard
Opened
#170 Dependency Dashboard
Opened
#171 Dependency Dashboard
Opened
#172 Dependency Dashboard
Opened
#173 Dependency Dashboard
Opened
#174 Dependency Dashboard
Opened
#175 Dependency Dashboard
Opened
#176 Dependency Dashboard
Opened
#177 Dependency Dashboard
Opened
#178 Dependency Dashboard
Opened
#179 Dependency Dashboard
Opened
#180 Dependency Dashboard
Opened
#181 Dependency Dashboard
Opened
#182 Dependency Dashboard
Opened
#183 Dependency Dashboard
Opened
#184 Dependency Dashboard
Opened
#185 Dependency Dashboard
Opened
#186 Dependency Dashboard
Opened
#187 Dependency Dashboard
Opened
#188 Dependency Dashboard
Opened
#189 Dependency Dashboard
Opened
#190 Dependency Dashboard
Opened
#191 Dependency Dashboard
Opened
#192 Dependency Dashboard
Opened
#193 Dependency Dashboard
Opened
#194 Dependency Dashboard
Opened
#195 Dependency Dashboard
Opened
#196 Dependency Dashboard
Opened
#197 Dependency Dashboard
Opened
#198 Dependency Dashboard
Opened
#199 Dependency Dashboard
Opened
#200 Dependency Dashboard
Opened
#201 Dependency Dashboard
Opened
#202 Dependency Dashboard
Opened
#203 Dependency Dashboard
Opened
#204 Dependency Dashboard
Opened
#205 Dependency Dashboard
Opened
#206 Dependency Dashboard
Opened
#207 Dependency Dashboard
Opened
#208 Dependency Dashboard
Opened
#209 Dependency Dashboard
Opened
#210 Dependency Dashboard
Opened
#211 Dependency Dashboard
Opened
#212 Dependency Dashboard
Opened
#213 Dependency Dashboard
Opened
#214 Dependency Dashboard
Opened
#215 Dependency Dashboard
Opened
#216 Dependency Dashboard
Opened
#217 Dependency Dashboard
Opened
#218 Dependency Dashboard
Opened
#219 Dependency Dashboard
Opened
#220 Dependency Dashboard
Opened
#221 Dependency Dashboard
Opened
#222 Dependency Dashboard
Opened
#223 Dependency Dashboard
Opened
#224 Dependency Dashboard
Opened
#225 Dependency Dashboard
Opened
#226 Dependency Dashboard
Opened
#227 Dependency Dashboard
Opened
#228 Dependency Dashboard
Opened
#229 Dependency Dashboard
Opened
#230 Dependency Dashboard
Opened
#231 Dependency Dashboard
Opened
#232 Tailscale client fails to re-authenticate using an auth key after logout
Opened
#233 Embeded DERP server with NGiNX
Opened
#234 Dependency Dashboard
Opened
#235 Print out loaded ACLs
Opened
#236 ACLs and routes
Opened
#237 Build failure on OpenBSD
Opened
#238 Toggleable /swagger, /windows and /apple endpoints
Opened
#239 expiration time unit does not parse correctly
Opened
#240 Add DNS01 Challenge
Opened
#241 Changing the log level doesn't appear to change the actual log level
Opened
#242 OIDC: failure to reconnect a node after logout due to Machine registration expired
Opened
#243 Profile doesn't work for the Tailscale iOS Client?
Opened
#244 headscale exit node
Opened
#245 Running headscale commands as non-root produces generic "deadline exceeded" error message
Opened
#246 The client cannot regenerate the registration key
Opened
#247 Manually add tags to nodes from headscale
Opened
#248 Getting headscale to work with Docker-Compose and Traefik
Opened
#249 Proposal: Implement TS2021 (Tailscale control protocol v2)
Opened
#250 Create a Matrix Chat room
Opened
#251 客户端注册疑问
Opened
#252 Headscale Discord link invalid
Opened
#253 Headscale shouldn't start if ACL policy is wrong
Opened
#254 Defining a derp server (and removing default ones) disables direct connection
Opened
#255 ACLs problem ( it is confuse about my ACLs can not working well)
Opened
#256 Derp implementation, propagation, status, and an issue with ip assignment
Opened
#257 Set MapResponse.Debug.DisableLogTail
Opened
#258 OpenID Connect: scopes, custom parameters and domain filter
Opened
#259 Any plans to add option to disable key expiry?
Opened
#260 How to setup an unstrusted private Derper
Opened
#261 bug in function excludeCorrectlyTaggedNodes()
Opened
#262 Let's Encrypt certificates for clients
Opened
#263 Fix scalability issues affecting the integration tests
Opened
#264 ACLs don't work with host aliases or wildcard sources
Opened
#265 Machine waiting for OIDC auth is spamming the server with requests
Opened
#266 Multi server support
Opened
#267 Add ACL management via API
Opened
#268 Machine namespace not changed after logout and reauth
Opened
#269 Support new ACL format
In february tailscale added src and dst field for ease of use on users and ports respectively
Opened
#270 After adding IPv6 prefix in config, existing machines don't get IPv6 addresses
Opened
#271 Random suffix added to node names in DNS
Opened
#272 Handle CORS headers and OPTIONS method for HTTP API
Opened
#273 v0.16.0-beta2 crashes immediately on Ubuntu 21.10
Opened
#274 Version sub command always shows "dev"
Opened
#275 Issue with the containers release
Opened
#276 [Not bug, but Enhancement]Rename Machine won't change the name's record in [nodes ls]
Opened
#277 Segfault when running ``headscale nodes list --output json`` when backend is not running.
Opened
#278 MagicDNS Enable will cause clients can't discover each other.
Opened
#279 Add cli command for ACL validation
Opened
#280 No support for "autogroup:" in ACL rules
Opened
#281 Toggle JSON logging
Opened
#282 Who can give some advice on developing IOS apps? About how to develop.
Opened
#283 Allow to specify initial API key as a flag for serve command
Opened
#284 Local DNS resolution doeesn't work on macOS with MagicDNS enabled
Opened
#285 Add SSH support to ACLs
Opened
#286 Stopping via systemd leads to kill after timeout
Opened
#287 Windows tailscale client - NodeKey regeneration not supported
Opened
#288 failed to read or create private key: failed to parse private key: key hex has the wrong size, got 44 want 64
Opened
#289 Env var for config location
Opened
#290 Container's embedded DERP only has STUN port
Opened
#291 cannot decrypt response
Opened
#292 Regression in HTTP API for 0.16.0-beta5
Opened
#293 a confuse that half flow/bandwidth has been wasted by unknow reason
Opened
#294 headscale version gives unexpected output
Opened
#295 Make server errors exported
Opened
#296 Only distribute split dns entries when the corresponding route is available
Opened
#297 Sporatic DNS Failures
Opened
#298 Fails to build from source on 32-bit platforms
Opened
#299 dst:"*:*" not working in ACLs
Opened
#300 Support disableIPv4 network policy option
Opened
#301 You can change the coordination server on the android client
Opened
#302 Upgrading from 0.16 beta 5 to 0.16 (release) - constant messages about adding new nodes?
Opened
#303 Adding capability to update ACLs via REST API
Opened
#304 Yunohost app
Opened
#305 0.16 panic: go 1.19 go4.org/unsafe/assume-no-moving-gc
Opened
#306 Implement long poll for interactive login
Opened
#307 connect postgres through a unix socket
Opened
#308 Api tls on and off function and single/multiple allowed access netmask or ip
Opened
#309 add --verify-clients environment variable to docker version
Opened
#310 Support Postgres TLS
Opened
#311 Machines cannot register again after logging out
Opened
#312 OIDC auth in 0.16.2 fails with "Failed to decode id token claims"
Opened
#313 Add support for host aliases when using MagicDNS?
Opened
#314 Headscale fails to activate clients with postgresql backend
Opened
#315 How to add subnet routing? "route is not available on machine"
Opened
#316 ERR noise upgrade failed error="no next protocol in HTTP request"
Opened
#317 Optional random node suffixes.
Opened
#318 acme/autocert: missing certificate
Opened
#319 v0.17.0-alpha2 doesn't serve on 443
Opened
#320 Update buf googleapis reference
Opened
#321 Tailscale client fails to connect
Opened
#322 Several connections issues
Opened
#323 Is IPv6 subnet route (4via6) support?
Opened
#324 tailscale GUI on macOS doesn't display exit nodes from headscale
Opened
#325 Potential channel leak
Opened
#326 Identifying remote client ip
Opened
#327 How to use routes? In Android for example.
Opened
#328 Various ACL rules not working
Opened
#329 How do I know if clients are really connected directly
Opened
#330 Problem with inter-headscale communication due to missing noise key.
Opened
#331 help me derp
Opened
#332 Generate TLS certs on integration tests
Opened
#333 Unique constraint failed on namespace name when registering clients using OIDC
Opened
#334 Unable to bring headscale up if OIDC is down
Opened
#335 Support Split DNS
Opened
#336 tls_client_auth_mode Documentation Question
Opened
#337 log.tailscale.io DNS queries
Opened
#338 Headscale says OIDC setup failed on success when only-start-with-OIDC is enabled
Opened
#339 Allow SQLite to be defined as URL / with paramters
Opened
#340 Log flood
Opened
#341 Version output in completion script
Opened
#342 Default isolation of namespaces via config parameter
Opened
#343 tailscale file cp , cause 502 Bad Gateway
Opened
#344 Usage of OIDC groups claim
Opened
#345 MagicDNS without DNS nameservers
Opened
#346 Running with no args produces panic
Opened
#347 tailscale client cannot register/login when setup headscale behind istio
Opened
#348 ARM support
Opened
#349 Mac Cannot register machine: machine not found in registration cache
Opened
#350 Cannot Decode Message
Opened
#351 Namespace borders not applied by default
Opened
#352 Logging HTTP API endpoint
Opened
#353 Integration tests v2
Opened
#354 Cannot connect to the embeded DERP when running headscale behind a reverse proxy
Opened
#355 Logging to file
Opened
#356 Can't register a machine via HTTP API (if logged out?), only via gRPC/CLI
Opened
#357 OIDC returns empty namespace if id_token doesn't contain email
Opened
#358 Bug during registration new macos node
Opened
#359 /home/runner/work/headscale/headscale/cmd/headscale/cli/utils.go:122
Opened
#360 Registering new nodes with offline private key
Opened
#361 Headscale's config file is garbled after being downloaded from github
Opened
#362 Cannot login/register with Tailscale Windows client
Opened
#363 failed to bind to TCP address: listen tcp 0.0.0.0:4000: bind: address already in use
Opened
#364 Implement Key Expiry
Opened
#365 Option to use Username instead of email when logging in via oidc
Opened
#366 Headscale can not connect to postgresql with SNI in used.
Opened
#367 ACL src/dst with host-alias not working
Opened
#368 Support NextDNS DoH resolver
Opened
#369 Failed to set up gRPC socket | permission denied
Opened
#370 Feature Request: Random IP Address Assignment
Opened
#371 Make headscale console ANSI output optional
Opened
#372 Temporary failure in name resolution
Opened
#373 Out of sync with local time zone
Opened
#374 What are the security risks of providing services with the http protocol on the public Internet
Opened
#375 bash, dash ash or whatever shell on docker container
Opened
#376 Update message breaks bash completion
Opened
#377 headscale post-launch link 3.121.104.141:443
Opened
#378 --snat-subnet-routes=true not work
Opened
#379 Unable to download macos-standalone profile due to misspell
Opened
#380 Subnet router networks wide open
Opened
#381 Expotential CPU usage from allowed peer checks
Opened
#382 Webpage not reachable via port 8080 when using docker
Opened
#383 Hide other namespaces
Opened
#384 Magic DNS and AAAA records pointing at IPv6 addresses of nodes in dual-stack tailnet
Opened
#385 Add db_ssl as mandatory to v0.17 release notes under the breaking section, or default it to false, when using a pg database
Opened
#386 using exit node isolated myself
Opened
#387 Plans to implement Funnel?
Opened
#388 Split DNS only works sporadically
Opened
#389 Logout and login back got different IP address
Opened
#390 Suspected bug with ip_prefixes
Opened
#391 Integrate pull request preview environments
Opened
#392 the same server,client 1.34.0 fail register. but client 1.24.2-dev success.
Opened
#393 Unable to install
Opened
#394 Clients from different namespaces can ping each other.
Opened
#395 Security audit?
Opened
#396 Donations
Opened
#397 Using the “curl http://xxx:8080/apple/macos” command, an error "Invalid platform, only ios and macos is supported" is reported
Opened
#398 Routes are not propagated in v0.18.0-beta1
Opened
#399 tailscale 1.34.1 can't login to headscale 0.17.1
Opened
#400 Headscale tab completion funky behaviour
Opened
#401 Better name resolution for CNAME records
Opened
#402 Remove ephemeral nodes immediately upon logout
Opened
#403 [OIDC] Allowed_groups directive issue
Opened
#404 namespace.basedomain.xyz cannot resolve any nameserver provided by a third-party DNS provider
Opened
#405 headscale_0.18.0-beta2 cannot open the exit node
Opened
#406 [feature] Support running under a HTTP path
Opened
#407 [feature] Update details nginx / reverse proxy example
Opened
#408 [OIDC] Plans about Known limitation
Opened
#409 Cache getMapResponseData
Opened
#410 Nologin is on a different path in Debian and derivatives
Opened
#411 Data race in pollNetMapStream()
Opened
#412 Have to reconnect Tailscale on Android now and then to resolve custom DNS records
Opened
#413 Support install headscale with helm to kubernetes cluster
Opened
#414 add --verify-clients option to embedded DERP server as tailscale derper support it
Opened
#415 MachineKey not displayed for some nodes when listing nodes from CLI
Opened
#416 MagicDNS issues with systemd resolver configuration and Docker containers (Ubuntu)
Opened
#417 Split DNS behaviour differs from tailscale's
Opened
#418 You can specify a specific IP for the client by modifying the "db.sqlite" data
Opened
#419 OIDC configure expiry time
Opened
#420 user_id column within machines table are not migrated from the namespace_id column after upgrade to 0.19.0-beta1
Opened
#421 client_secret_path: cli.initConfig: SIGSEGV
Opened
#422 OAuth Provider + Tailscale Kubernetes operator compatibility
Opened
#423 private.key: no such file or directory
Opened
#424 Expose more machine info via api
Opened
#425 Keycloak no longer supports redirect_uri
Opened
#426 DNS extra_records don't work with Split DNS and a client capable of natively doing Split DNS
Opened
#427 Is it possible to host headscale on serverless platforms?
Opened
#428 Private key not creating
Opened
#429 Unable to run in linux background using headscale.service
Opened
#430 Documentation issues
Opened
#431 IP address mask /32 causes issues with dnsmasq
Opened
#432 Does headscale support OCSP stapling?
Opened
#433 error decoding RegisterResponse with server key
Opened
#434 A small tip about dependency "github.com/ccding/go-stun/stun"
Opened
#435 n/a
Opened
#436 scale 启动失败
Opened
#437 Support "configtest" to verify configuration and ACLs.
Opened
#438 Deleting a node does not delete the associated route entry (v0.20.0)
Opened
#439 Headscale logs bearer tokens
Opened
#440 I hope that the next version can integrate self-checking derp, and can be accessed through ip, and is compatible with http/https protocol
Opened
#441 headscale can ping through different namespaces
Opened
#442 [docs/server,sqlite] Locked database, likely due to SystemD unit
Opened
#443 Equipment insulation
Opened
#444 get-authkey example
Opened
#445 IPv6 exit node ACL not working
Opened
#446 iOS does not take custom Coordination URL into account
Opened
#447 Quickstart script
Opened
#448 acl support hot reload and acl http api
Opened
#449 route 0.0.0.0/0and::/0 enable/disable action
Opened
#450 make api support cors
Opened
#451 Users that don't belong to any ACL can access the whole network
Opened
#452 registration fails silently with long machine hostname
Opened
#453 custom device login page
Opened
#454 ERR noise upgrade failed error="noise handshake failed: decrypting machine key: chacha20poly1305: message authentication failed
Opened
#455 Better Docker Support PR
Opened
#456 suspected bug with ipv4/ipv6
Opened
#457 ACL issue: specifing CIDR from subnet doesn't work
Opened
#458 Documentation improvement
Opened
#459 Unable to ssh with tailscale
Opened
#460 Need help/clarification regarding MagicDNS + TLS
Opened
#461 Cannot register machine: machine not found in registration cache
Opened
#462 Tailnet Lock Feature request
Opened
#463 Unable to disable Headscale from using Tailscale DERP nodes
Opened
#464 Generic DoH/DoT (DNS-over-HTTPS/DNS-over-TLS) Support
Opened
#465 Preauth keys for different users
Opened
#466 Can you provide the official standard 'docker composite. yml' file？
Opened
#467 What specific services does 'embedded DERP (and STUN) server' provide
Opened
#468 Synology support?
Opened
#469 ACL forbidden subnet routes should not be routed
Opened
#470 Need help compiling for arm
Opened
#471 Windows client guide seems outdated
Opened
#472 Homebrew formula for macOS CLI releases
Opened
#473 failed to set up a HTTP server error="listen tcp :80: bind: permission denied"
Opened
#474 Upgrade path from Binary to .deb / .rpm
Opened
#475 ACLs with multiple users do not work
Opened
#476 Exit node appears on windows only when both ipv4 and ipv6 0/0 routes are enabled
Opened
#477 Tailscale status strange IP display
Opened
#478 headscale.service location
Opened
#479 API for adding Extra Domain Records
Opened
#480 How to use commands to upgrade headscale to 0.22.0
Opened
#481 Tagged devices should not have access permissions of their owning user
Opened
#482 No RPM packages?
Opened
#483 Remove v0.23.0 Docker Tag
Opened
#484 chore: move components in separate packages
Opened
#485 Headscale does not start with large networks in ACLs
Opened
#486 Peering/federating between headscale instances
Opened
#487 CertManager's 10s TLS handshake error EOF
Opened
#488 Bug: peers not notified of deletion when 2 nodes in network
Opened
#489 FR: Send Peers delta in MapResponse
Opened
#490 segmentation fault without logs
Opened
#491 0.22.1 uses way, way more memory than 0.21?
Opened
#492 logout node expired but not deleted
Opened
#493 Allow OIDC tokens for API request
Opened
#494 TLS handshake remote error: tls: bad certificate
Opened
#495 Support of Tailscale ACL node attributes
Opened
#496 Wrong unix_socket in example config
Opened
#497 Cannot get it run on my vps
Opened
#498 ip_prefixes cannot be displayed properly
Opened
#499 DERP map not loaded from path
Opened
#500 [Missing documentation] Security considerations – what if Headscale server gets compromised?
Opened
#501 FR: Pull embedded DERP server URL from client request
Opened
#502 Reduce failover time for subnet routers in HA setup
Opened
#503 Registry override does not work, still generates official registration link
Opened
#504 Custom/change IP address
Opened
#505 Catch sync group errors in integration tests
Opened
#506 Updating to 0.22.2 causes all devices to see each other, regardless of ACLs
Opened
#507 After update to 0.22.2 port 41461 gets blocked by ufw on clients
Opened
#508 After updating to 0.22.2, headscale refuses let's encrypt certificates
Opened
#509 Difficult login on windows
Opened
#510 Strange shutdown/restart behavior on 0.22.2
Opened
#511 tailscale setup migration?
Opened
#512 Long time to establish first ping
Opened
#513 Purpose of non-standard POST method in Websocket handshake?
Opened
#514 [Code Freeze] Restructuring the code
Opened
#515 Usage issues
Opened
#516 ACLs don't properly handle users
Opened
#517 kubernetes integration
Opened
#518 Stop using gorilla mux
Opened
#519 How to customize the registration authentication page
Opened
#520 [minor Bug] ephemeral_node_inactivity_timeout (3d) is set too low
Opened
#521 Orphaned routes accumulating in the routes table
Opened
#522 How to fix the tunnel address of a device (100.64. *. *)
Opened
#523 Allow DNS wildcards in config
Opened
#524 Derb error on startup
Opened
#525 node with tailscale 1.44.0 can't connect to other node.
Opened
#526 When does derp.yaml support the InsecureForTests configuration item
Opened
#527 Nodes drop from map poll.
Opened
#528 Frequent "offline" status causing subnet router re-election and connection disruptions
Opened
#529 Vulnerability of dependency "github.com/gin-gonic/gin"
Opened
#530 restricted_nameservers resolution fails when --accept-routes is false
Opened
#531 Ability to reload headscale in docker container
Opened
#532 /key?v=65 unsupported protocol scheme
Opened
#533 Headscale setup oidc with Authelia not work
Opened
#534 Fallback NXDOMAIN MagicDNS records to defined nameservers
Opened
#535 When does derp.yaml support the InsecureForTests configuration item
Opened
#536 Logout endpoint OIDC
Opened
#537 Log(WARN) interferes with "--output json".
Opened
#538 Feature: kubernets operator for headscale
Opened
#539 Bug in user switching during OIDC authentication
Opened
#540 fail2ban rule for API?
Opened
#541 command ping higher not match command Tailscale ping
Opened
#542 Offer Debian repository to keep Headscale installations up to date
Opened
#543 Simplify SSL Certificates Handling for Tailscale's serve Command by Replacing Dot with Dash in Machine.GetFQDN
Opened
#544 Enhance OIDC Authentication with refresh_token Support
Opened
#545 How to change standard port with script?
Opened
#546 Please release a Headscale module for pfSense
Opened
#547 GRPC response codes not explicitly set for all errors
Opened
#548 Headscale keeps repeating prompts that there are no logs with nodekey present。
Opened
#549 Steps to make headscale production ready
Opened
#550 zerolog panics "index out of range"
Opened
#551 【Function Request】 Headscale interface outputs a list of devices based on ACLs.
Opened
#552 Tailscale client v1.48.x: Multiple instances of routes in headscale and --exit-node advertisement dns name not working
Opened
#553 Feature request: Webhooks
Opened
#554 Support for WireGuard only peers
Opened
#555 when use embedded DERP server, there are a lot of identical logs with "named node xxx no address" in tailscaled
Opened
#556 Connection prompt version warning
Opened
#557 Interface-specific DNS not set if not overriding local nameserver
Opened
#558 How to have a reusable preauth key that does not expire?
Opened
#559 Bugs related to state change in #1492
Opened
#560 Does headscale support autogroup?
Opened
#561 fail to run headscale serve
Opened
#562 Let's encrypt not reissuing certificates
Opened
#563 Add ability to annotate and delete preauth keys over time
Opened
#564 Outdated or confusing documentation regarding ACLs ?
Opened
#565 headscale server stopped answering after a day of uptime despite listening of all the ports
Opened
#566 Headscale service restart timing out
Opened
#567 "TRC DNS configuration loaded" logs always printed to STDOUT
Opened
#568 The headscale node status displays an error, showing offline but actually online.
Opened
#569 Tailscale is unable to connect to the specified port.
Opened
#570 API interface for start preauthkeys not set expiration properly
Opened
#571 Too many open connections with Postgres server
Opened
#572 Assign a fixed node to a preauthkey connection attempt
Opened
#573 Windows clients do not respect DisableLogTail set by Headscale
Opened
#574 rule could not be enabled
Opened
#575 4via6subnetrouter not working
Opened
#576 I have set up two users. But the computers in the two users can still communicate with each other. Am I setting it wrong?
Opened
#577 Removing an ACL is not pushed out to clients
Opened
#578 ACL Documentation error
Opened
#579 headscale-node shows offline
Opened
#580 Print nodes in registration cache
Opened
#581 Subnet router ACL's broken on 0.23.0-alpha1
Opened
#582 ACLs not working with IPV6 (reopening of #809)
Opened
#583 failed to read or create private key
Opened
#584 headscale version
Opened
#585 Add support for web client check mode
Opened
#586 the same user can synchronize the clipboard
Opened
#587 Can't bind to IPv6 with grpc_listen_addr
Opened
#588 Main branch - server cannot connect to itself
Opened
#589 node in exit-node mode not forwarding traffic to same network which belongs external interface
Opened
#590 Let's Encrypt / ACME
Opened
#591 Wrong API call will cause headscaled down
Opened
#592 Integration test for database migrations
Opened
#593 Installation error
Opened
#594 Expiry information does not seem to be propagated correctly
Opened
#595 Dosn't work with webvm.io
Opened
#596 FR: support for App Connectors
Opened
#597 Get Version from API
Opened
#598 Advertising and existing pre-authorised route does not enable it
Opened
#599 Headscale stops accepting connections after ~500 nodes (likely 512) (0.23-alpha2)
Opened
#600 Expire a used key
Opened
#601 Incorrect example path in ACL documentation
Opened
#602 When using embedded DERP server, how to verify the client
Opened
#603 override_local_dns dosent work on maos
Opened
#604 Expired nodes error
Opened
#605 Registering a node with --advertise-tags flag causes table corruption
Opened
#606 Add "delete" to the 'apikey' command
Opened
#607 Add custom STUN responses
Opened
#608 OIDC reauthentication hangs
Opened
#609 config-example.yaml is missing private key path
Opened
#610 Unable to connect to headscale
Opened
#611 Use Authorization in Swagger UI with SecurityDefinition in .swagger.json
Opened
#612 Support for 2fa?
Opened
#613 Two nodes appear repeatedly
Opened
#614 Headscale CLI reaching out to Github servers on every request
Opened
#615 Support for Network Flow Logging?
Opened
#616 OIDC client secret containing whitespace when read from file
Opened
#617 OIDC Tailscale logout prevents future logins - unless node is manually deleted and node ID is incremented
Opened
#618 Add support for form_post OIDC callbacks
Opened
#619 route failover considers disabled routes as new primaries
Opened
#620 port knocking in front of headscale server?
Opened
#621 Tailscale client logout with OIDC reconnect does not work (Linux and iOS clients)
Opened
#622 Split TLS options for gRPC and HTTP
Opened
#623 Unable to create private key on first run.
Opened
#624 Authenticating with auth-key does not set node expiry
Opened
#625 headscale server list nodes ,one node display offline,but other node
Opened
#626 about acl
Opened
#627 Preauthkey table reusable column is incorrect
Opened
#628 Doc request: Expected renewal behavior for autocert
Opened
#629 ACLs ?
Opened
#630 Node key rotating
Opened
#631 Ephemeral nodes no longer correctly expire
Opened
#632 Status update is done when only LastSeen is changed
Opened
#633 Verify all database connections are closed when process is killed
Opened
#634 Device approval
Opened
#635 LastInsertId is not supported by Postgres
Opened
#636 Migration eventually incomplete: last_successful_update part of 0.23.0-alpha3 SQLite dump, but not of newly initialised PostgreSQL nodes table schema
Opened
#637 Config is not migrated properly
Opened
#638 v0.23.0 image tag available on Docker but not on project
Opened
#639 headscale crashes with OOM when sqlite path is ommited
Opened
#640 Headscale container keeps restarting
Opened
#641 Document ports used
Opened
#642 Sqlite and Sqlite3 db types fail to start with "out of memory" on v0.23.0-alpha4
Opened
#643 Impossible to change server URL on firetv stick
Opened
#644 improve error message and document that the ipv6 prefix is now required
Opened
#645 Backend Error: invalid key: unable to validate API key when trying to auth clients using preauthkeys
Opened
#646 Servers IBM AIX powerpc
Opened
#647 Reducing filter rules breaks exit node access
Opened
#648 Benchmarks
Opened
#649 Linux != Only Ubuntu & Debian
Opened
#650 Support SSH session recording configuration
Opened
#651 "Did not find expected key" on clean config
Opened
#652 Headscale removes node after it was re-added
Opened
#653 Allow multicast traffic to flow through the network
Opened
#654 headscale preauth create writes warnings to stdout
Opened
#655 Cant get to Container Console in latest alpha5 after Updated from latest stable
Opened
#656 When the acl.yaml file is modified, does it need to restart the headscale service to take effect?
Opened
#657 Support ACL Tests
Opened
#658 Shoehorn PSK-based authentication to provide key rotation and stronger identity guarantees
Opened
#659 Docker Hub: No tag 'headscale:latest' anymore
Opened
#660 -
Opened
#661 Node with empty disco_key in DB prevents to start headscale
Opened
#662 headscale 0.23.0-alpha5 ignores /32 masks in ACLs
Opened
#663 Default to a FilterDenyAll instead of tailcfg.FilterAllowAll if no acl policy defined
Opened
#664 Error: unknown command "headscale" for "headscale" Running headscale in a container
Opened
#665 Question: On the reason for not encouraging container and reverse proxy usage
Opened
#666 Add "x-tailnet" ACL src/dst type
Opened
#667 Request: Guidance on Disabling IPv6 Address Functionality
Opened
#668 Tailscale connection fails in both Docker container and new LXC container on Proxmox
Opened
#669 Update notice breaks JSON output
Opened
#670 Headscale exit node route needs to be reenabled every time a client advertises exit node
Opened
#671 Docubuild fails
Opened
#672 Rework IP fields in database
Opened
#673 Some Permission denied by ACL when same tags on a couple of clients
Opened
#674 Request for Configuration of --verify-clients Parameter in Built-in DERP
Opened
#675 Extra Records configuration changed in alpha5 to require subnet?
Opened
#676 Wildcard DNS-Records
Opened
#677 Unclear sentences in documentation about ACLs
Opened
#678 Building error！
Opened
#679 Support for SSH check mode in ACLs
Opened
#680 Cannot Set forcedTags to Empty Array via API or CLI
Opened
#681 When already-expired node is set to "Never Expire" (expiry is NULL), it does not go back to logged-in status.
Opened
#682 Cannot get nodes: context deadline exceeded returns 0 exit code and wrong stderr output
Opened
#683 Add documentation about using the same machine as client and server
Opened
#684 preauthkeys: Allow specifying key material
Opened
#685 Segmentation Fault on OpenBSD 7.5
Opened
#686 Implement OIDC Group support for Google Workspace (was GSuite) issuer/provider
Opened
#687 no public network Endpoints
Opened
#688 Headscale crash with unknown cause
Opened
#689 acl documentation inaccurate parameter
Opened
#690 CA Certificates missing
Opened
#691 Headscale should retry gracefully when the OIDC provider is unavailable
Opened
#692 headscale crashes after what seems a successful start - latest master, alpha6,7+8
Opened
#693 Integration tests for database migrations
Opened
#694 Missing Metrics for last machine contact
Opened
#695 Likely ACL regression in 0.23-alphas
Opened
#696 Headscale logs in user A with user B's auth key
Opened
#697 [Bug] Tailscale Android beta app doesn't create routes when using Headscale
Opened
#698 alpha9 takes 90 seconds to stop
Opened
#699 [Bug] OIDC not working with Authentik > 2024.2?
Opened
#700 [Bug] latest upstream version is wrongly detected
Opened
#701 [Bug] panic: public key moved between nodeIDs (dup node entry)
Opened
#702 [Feature] Support tailscale serve with HTTPS
Opened
#703 [Bug] restricted_nameserver is configured containing custom DNS records, clients do not resolve correctly
Opened
#704 [Bug] Minor issue, where headscale thinks alpha9 is newer than alpha11
Opened
#705 [Feature] strict config validation
Opened
#706 [Question] What happened to headscale_last_update_seconds ?
Opened
#707 Received error: control server is too old; no noise key
Opened
#708 [Bug] Tailscale doesn't connect after phone reboot with Tailscale connection on
Opened
#709 [Feature] Expose OIDC server status via monitoring
Opened
#710 [Bug] macOS unable to connect, node has an open stream(..), rejecting new stream
Opened
#711 [Feature] Restricted nameservers without search domains
Opened
#712 [Bug] Unstable tailscale client Integration Test fails
Opened
#713 [Bug] Unify integration test docker
Opened
#714 [Feature] Support for derp's verify-client-url
Opened
#715 [Bug] ACL can't work with netmask smaller than /24
Opened
#716 [Bug] v0.23 does not work with PostgreSQL
Opened
#717 [Bug] ACLs although going one way, are discoverable by the "dst".
Opened
#718 [Feature] Improve docu development
Opened
#719 [Bug] dns_config.domains only works if override_local_dns is enabled
Opened
#720 [Bug] Can't always connect to Heascale through data (lte/4g) without passing via wifi first
Opened
#721 [Bug] Node Connection Issues(~600 nodes) in v0.23.0-alpha12
Opened
#722 headscale docker keep restarting
Opened
#723 [Bug] systemctl stop headscale is very slow!
Opened
#724 Inter-controlplane federation
Opened
#725 [Feature] Filter output of cli commands
Opened
#726 [Bug] Issues with OIDC, Authelia and Nix Agenix together
Opened
#727 [Feature] OIDC DisplayName and ProfilePicURL support
Opened
#728 [Feature] provide docker containers with two standard tags "latest" and "production"
Opened
#729 [Bug] Method Hosts.UnmarshalYAML does not add CIDR notation
Opened
#730 [Feature] Use SQLite in WAL mode by default
Opened
#731 [Bug] GetDERPMap tls failed to verify certificate
Opened
#732 [Bug] Insecure TLS Configuration in Headscale creating
Opened
#733 [Feature] OIDC with permanent ID
Opened
#734 [Bug] TLS internal error when attempting to login
Opened
#735 [Feature] Add option to associate an api key to a specific user
Opened
#736 New release?
Opened
#737 [Bug] API inconsistencies
Opened
#738 [Feature] Benchmarking PostgreSQL vs. SQLite for Large-Scale VPN Networks Using Headscale
Opened
#739 [Bug] lastSeen not updating, causing ephemeral nodes to be incorrectly removed
Opened
#740 [Feature] Support listening for metrics on tailscale address
Opened
#741 [Feature] allow environment variables in config file also in postgresql config
Opened
#742 [Feature] Add ExecReload to systemd service
Opened
#743 [Feature] add support for payments via stripe
Opened
#744 [Feature] migrate node
Opened
#745 [Bug] 0.23.0-beta1 breaks DNS custom nameservers
Opened
#746 [Bug] v0.23.0-beta1 breaks built-in DERP
Opened
#747 [Bug] ACL policy not working after update to v23.0 beta1
Opened
#748 [Bug] 0.23.0-beta1 wipes resolv.conf on clients regardless of dns_config
Opened
#749 [Feature] Add SafeSurfer DoH
Opened
#750 [Bug] tailscale on ios cannot connect to the postgresql server
Opened
#751 [Bug] expiring a node does not update the online status
Opened
#752 [Bug] API does not return tags for a node
Opened
#753 [Bug] API backfillips call fail
Opened
#754 [Bug] ipv4 range not used
Opened
#755 tailscale-private | 2024/08/04 15:49:08 control: NetInfo: NetInfo{varies=true hairpin= ipv6=false ipv6os=true udp=true icmpv4=false derp=#900 portmap= link="" firewallmode="ipt-default"}
Opened
#756 [Bug] Self-built DERP server cannot obtain delay information
Opened
#757 [Bug] Tailscale Exit Node DNS Doesnt Provide DNS
Opened
#758 [Feature] Headscale policy set validate ACL before applying?
Opened
#759 [Bug] Feature request form
Opened
#760 [Bug] 0.23.0-beta client setup hangs on linux on raspberry pi
Opened
#761 [Bug] gRPC API fails to resolve relative policy file path, unlike server startup behavior
Opened
#762 [Bug] New Config.yaml ACL section does not work - Must use old acl_policy_path
Opened
#763 [Bug] Windows magic DNS not working in beta2
Opened
#764 [Bug] Unable to Add Another Account on Windows 10 Client 1.70.0
Opened
#765 [Bug] Policy ACLs broken in v0.23.0-beta2 but worked in v0.23.0-beta1
Opened
#766 [Bug] Upgrade from 0.22.3 to 0.23.0-beta2 loses/forgets routes
Opened
#767 [Bug] dns.use_username_in_magic_dns configuration key is deprecated warning
Opened
#768 [Bug] NextDNS does not work in 0.23.0-beta2
Opened
#769 [Bug] Latest supported client.
Opened
#770 [Bug] AutoApprovers route not work as expect
Opened
#771 [Bug] Failed to read headscale configuration error="server_url cannot contain the base_domain, this will cause the headscale server and embedded DERP to become unreachable from the Tailscale node."
Opened
#772 [Issue]Route is not pushed on client machine
Opened
#773 [Bug] Upgrade from version 0.22.3 to 0.23-beta2 failed database migration
Opened
#774 [Bug] "Could not get the create map update"
Opened
#775 [Bug] Fatal Error: Did not find expected key
Opened
#776 [Bug] docker v0.23.0-beta2
Opened
#777 [Bug] Reauthenticate with OIDC does not work in 0.23.0-beta2
Opened
#778 [Feature] <title>How can Headscale manage IPs and set the IP information for nodes?
Opened
#779 [Feature] Update documentation for 0.23.0 release
Opened
#780 [Bug] Node registered with preauthkey has expiration of 0001-01-01 00:00:00 in Beta 2.
Opened
#781 [Bug] Convert proposals to issues or delete them
Opened
#782 [Bug] failed to bind to TCP address: listen tcp 0.0.0.0:443: bind: permission denied
Opened
#783 [Feature] Support for OneCGNATRoute network policy option
Opened
#784 [Feature] Compatibility with Tailout
Opened
#785 [Feature] Ability to Read Postgres-Pass from File
Opened
#786 [Improvement] use go-elem for HTML pages
Opened
#787 [Bug] Crash when deleting an online node
Opened
#788 [Bug] Different A record for nodes with the same name
Opened
#789 [Bug] headscale nodes list always prints debug/trace messages
Opened
#790 [Bug] online status doesn't change if connection is interrupted
Opened
#791 [Feature] Allow nodes to use SSH agent forwarding
Opened
#792 [Bug] error 404 when trying to connect to headscale
Opened
#793 [Feature] tailscale cert
Opened
#794 [Bug] Debian packages use incorrect shell
Opened
#795 [Bug] ERROR: Failed to extract ServerMetadata from context
Opened
#796 [Bug] <title>ACL does not work with exit node
Opened
#797 [Bug] Split DNS not working with v0.23.0
Opened
#798 [Bug] Hostname changes are not reflected
Opened
#799 [Feature] Support Taildrive
Opened
#800 [Bug] <title>OCI runtime exec failed: exec failed: unable to start container process: exec: "/bin/bash"
Opened
#801 [Bug] Error initializing error="enabling foreign keys: disk I/O error
Opened
#802 [Feature] API endpoint api/v1/node/<nodeId> should publish NetInfo and endpoints information.
Opened
#803 [Bug] Unable to delete node
Opened
#804 [Feature] Ability to change IP address
Opened
#805 [Bug] <title>If there are two users using the same subnet range, he only works with one
Opened
#806 [Feature] wildcard dns name rule
Opened
#807 [Bug] Nodes ls shows no devices after docker container restart
Opened
#808 [Bug] <title>missing "Bearer " prefix in "Authorization"
Opened
#809 [Bug] Tailscale HEAD (1eaad7d3d) is broken in integration tests
Opened
#810 [Feature] Any docs or instructions about Headscale API?
Opened
#811 [Feature] Assign IP addresses to non-headscale devices
Opened
#812 [Feature] Setting DisplayName and ProfilePicURL for headscale users
Opened
#813 [Bug] authURL is empty when using GitHub as an OIDC server
Opened
#814 [Bug] ACL: DST can be accessed by SRC
Opened
#815 [Feature] Tutorial on Deploying Headscale with TalosOS
Opened
#816 [Bug] container: missing stable-debug tag
Opened
#817 [Bug] Inconsistency ‘givenName’ in node
Opened
#818 [Feature] Manual approval of the node
Opened
#819 [Bug] no logging in JSON format, even when setting it in configuration
Opened
#820 [Bug] Does not receive ‘user’ field when changing node owner via API
Opened
#821 [Bug] ACLs with exact ip addresses don't work
Opened
#822 [Feature] "grants" feature support
Opened
#823 No connections reported after upgrading to version v0.23.0 from version v0.22.3
Opened
#824 Cloned VM with existing connection is not registered but has access/cannot deregister.
Opened
#825 [Bug] print wrong node information in poll.go
Opened
#826 [Bug] ACL not working as expected
Opened
#827 Register a cloned VM as a separate node.
Opened
#828 [Bug] "Unexpected fault address" when opening SQLite db under armv7
Opened
#829 [Feature] Taildrop between users
Opened
#830 [Bug] Nodes fail to remove from notifier - ERR update not sent
Opened
#831 [Bug] Remote CLI Configuration Problem after Upgrading to Headscale 0.23.0
Opened
#832 connection attempts to machine/map failed
Opened
#833 [Bug] Cannot add nodes
Opened
#834 [Bug] XSS Vulnerability in /admin/users
Opened
#835 [Feature] Support self-signed TLS (other than Let's Encrypt)
Opened
#836 [Bug] sqlite WAL never checkpointed, leading to constantly-increasing disk usage
Opened
#837 Using OpenID Connect should prevent CLI creation of users
Opened
#838 [Feature] Add host_info to api for nodes
Opened
#839 [Bug] Tailscale Client Fails to Resolve DNS
Opened
#840 [Bug] testing for server_url containing base_domain is too restrictive
Opened
#841 [Feature] Plea: keep "use_username_in_magic_dns" even after tags are fixed
Opened
#842 [Bug] failed to bind to TCP address: listen tcp :50443: bind: address already in use
Opened
#843 [Bug] Exessive logging
Opened
#844 [Feature] support tailscale wasm client
Opened
#845 [Bug] Latest config example contains deprecated key
Opened
#846 Debug docker image size is ridiculous.
Opened
#847 [Bug] subnet router failover not working properly when the subnet router node is not there at client authentication time ?
Opened
#848 [Feature] Decide user and subnet visibility based on ACL rules
Opened
#849 [Bug] 0.23.0 There seems to be some issues with the configuration
Opened
#850 [question] --verify-clients for the embedded DERP server
Opened
#851 [Bug] DNS not working when using exit nodes
Opened
#852 [Bug] test
Opened
#853 [Bug] Unable to access Headscale http server after installation
Opened
#854 [Feature] Allow to lookup Node by its Tailnet IP address in GRPC API
Opened
#855 [Bug] TestDERPServerWebsocketScenario is broken
Opened
#856 [Bug] Modifying prefixes:v4 does not take effect
Opened
#857 [Bug] CLI should use Stable IDs instead of usernames
Opened
#858 [Feature] nested groups support
Opened
#859 [Bug] Correct way to disable override local DNS in new configuration?
Opened
#860 [Feature] Template-based ACL generation
Opened
#861 [BUG] Lose Update to 0.23.0 (lost mtu)
Opened
#862 [Feature] Adding an option to prevent tailscale clients adding ~. to its DNS search domains for systemd-resolved.
Opened
#863 [Bug] Unable to delete a route that doesn’t belong to anyone
Opened
#864 Migration path from PostgreSQL to SQLite
Opened
#865 [Bug] Crash on startup while reading sqlite database
Opened
#866 [Feature] make it possible to read extra_records from file
Opened
#867 [Feature] Create a nostr account for the project for announcements and zapraising
Opened
#868 [Feature] get remote IP
Opened
#869 [Bug] https://headscale.net/ is down
Opened
#870 [Feature] A GUI client
Opened
#871 [Feature] Use the nonce parameter in OIDC authorization request to mitigate replay attacks
Opened
#872 [Feature] Hide Client List on Status
Opened
#873 [Feature] healthcheck command
Opened
#874 [Feature] Configurable Registration Cache timeouts
Opened
#875 [Feature] add note to docs about reloading ACLs with SIGHUP
Opened
#876 [Bug] Non-system headscale user and group from DEB packages
Opened
#877 [Bug] Unable to connect to Tailscale coordination server warning
Opened
#878 Add constraint between routes and nodes
Opened
#879 [Bug] Filewatcher stops watching dns.extra_records_path
Opened
#880 [Bug] email_verified Field Returned as String Causes Unmarshal Error in v0.24.0-beta.1
Opened
#881 [Bug] SIGHUP complains about ACL errors when no ACL is configured
Opened
#882 [Bug] Misleading error message while processing dns.extra_records_path
Opened
#883 [Feature] [Docs] update OIDC documentation for 0.24.0+
Opened
#884 TestOIDC024UserCreation is flaky
Opened
#885 [Bug] SSH permission denied after DB updated from wal v24.0beta1
Opened
#886 Evaluate ConnectRPC over gRPC + webgateway
Opened
#887 [Bug] Dead link to container docs in 0.23.0 changelog, possible buggy documentation
Opened
#888 [Feature] Enable CORS inside Headscale.
Opened
#889 [Bug] "headscale node ls --tags" does not list tags after v0.24.0-beta.1 upgrade
Opened
#890 [Bug] Headscale attempts to use non-existent TLS certs when using OIDC behind a reverse proxy
Opened
#891 [Bug] Headscale service is disabled after upgrading the deb package
Opened
#892 [Bug] headscale uses cfg.BaseDomain for building FQDNs
Opened
#893 Post Quantum
Opened
#894 [Feature] add a tampering proxy for integration tests
Opened
#895 [Feature] Pre-auth keys without user binding & group tagged devices
Opened
#896 [Feature] Recommended Exit Nodes
Opened
#897 [Feature] Support for node attributes (nodeattrs)
Opened
#898 [Feature] Include Headscale version in Swagger API Documentation
Opened
#899 [Bug] Nagging message to upgrade to a beta version
Opened
#900 [Bug] Change Account
Opened
#901 [Bug] OIDC users don't always get a username
Opened
#902 [Bug] "Getting started" doc suggests one tailnet per user
Opened
#903 [Bug] OIDC nil deref when visiting invalid/old callback urls
Opened
#904 "Domain" to display in GUI applications
Opened
#905 [Feature] Wildcard support for split DNS configuration
Opened
#906 [Bug] If a computer set an invalid hostname, the entire network will be unavailable
Opened
#907 [Bug] DNS Resolve Error for the base_domain(server_rul) at v0.24.0
Opened
#908 [Bug] Automatic database migration from 0.23.0 to 0.24.0 does not work with postgres
Opened
#909 [Bug] Calling routes API endpoint crashes with SIGSEGV
Opened
#910 [Bug] SIGSEGV: segmentation violation code=0x1 addr=0x8 pc=0x860100
Opened
#911 [BUG] Linux Clients Frequently Disconnect v1.78.1
Opened
#912 [Feature] List client versions in node list.
Opened
#913 [Feature] OIDC "offboarding"
Opened
#914 [Bug] Headscale tags differ conceptually from Tailscale tags
Opened
#915 [Bug] Headscale crashes when derp.update_interval is not set
Opened
#916 [Bug] headscale fails to start on full disk
Opened
#917 [Feature] Support using groups from OIDC in ACLs
Opened
#918 [Bug] Subnet routes are pushed to clients when not in allowed ACL
Opened
#919 [Bug] 0.24.0 immediately panics on time.NewTicker() with derp disabled
Opened
#920 [Bug] peers are not propagated to tagged nodes
Opened
#921 [Bug] Latest Docker Release Breaks Foreign Key Constraint in Database
Opened
#922 [Bug] EntraID OIDC - ACLs not being applied to OIDC registered users
Opened
#923 [Feature] <title>Cloudflare Tunnel support
Opened
#924 Migration failed
Opened
#925 Do not allow editing users from OIDC
Opened
#926 [Bug] headscale preauthkeys list -o json missing fields present in yaml: "reusable", "ephemeral"
Opened
#927 [Feature] enhance documentation OR rethink MagicDNS
Opened
#928 dead link to web ui choices in pinned issue
Opened
#929 [Bug] Tags applied to nodes are not applied in ACL until headscale service is restarted after adding the tag
Opened
#930 Separate user and server errors in http handlers
Opened
#931 TestValidateResolvConf is partially failing
Opened
#932 [Bug] ERR noise upgrade failed error
Opened
#933 Replace version handling with Go 1.24 handling
Opened
#934 [Feature] support tailscale in docker desktop?
Opened
#935 [Bug] DB migration fails to 24.2 (FK constraints on preauth_keys in nodes table)
Opened
#936 [Bug] Unable to compile latest codes
Opened
#937 Policy rework tracking bug
Opened
#938 [Feature] More Information of Unsupported Tailscale Client
Opened
#939 [Feature Request] Support for IP Sets and "Via" in Headscale ACL
Opened
#940 [Feature] More context for "node not found" error
Opened
#941 Tags tracking bug
Opened
#942 [Feature] <Proposal to Create an Official Headscale Organization for Better Collaboration 🌟>
Opened
#943 [Bug] a windows client cannot login
Opened
#944 [Feature] Is it possible to prevent different users from seeing each other's nodes?
Opened
#945 CA-Certificate : failed to verify --> unknown source
Opened
#946 [Bug] Headscale panic when a registered tailscale node is expired and is trying to bootstrap using an already used or expired preauthkeys
Opened
#947 [Bug] Version 0.25.0 breaks exit node routes
Opened
#948 headscale serv can't get mobile device name
Opened
#949 [Feature] WHMCS
Opened
#950 [Bug] OIDC Register/Login Page Opens Twice
Opened
#951 [Feature] Sub-ACLs can be made with the abbilty to affect a limited-number of devices
Opened
#952 [Bug] OIDC Token Verification Fails When Authentik Encrypts "id_token"
Opened
#953 [Bug]Unable to enable advertise-routes
Opened
#954 [Docs] Is "Enable HTTPS" supported?
Opened
#955 [Bug] <title>Can't log in. Could not get the create map update error="tailNode, failed to create FQDN: failed to create valid FQDN: node has no given name"
Opened
#956 [Bug] tailscale up with routes and login loses track of routes
Opened
#957 [Bug] Cannot Ban Specific Derp Region using RegionID
Opened
#958 [Feature] remove instruction pages and set server's homepage
Opened
#959 [Bug] Reauthentication via OIDC Breaks Connectivity Until Manual Disconnect and Reconnect
Opened
#960 [Bug] Same name hostnames exitnode shows only the old one but they have different node names
Opened
#961 [Feature] ghcr.io container registry availablility
Opened
#962 Request to use logo images on Snap Store listing
Opened
#963 [Feature] Posture check
Opened
#964 [Bug] Taildrop between un-tagged and tagged nodes works
Opened
#965 [Feature] Add Taildrop-Flag to Config
Opened
#966 [Bug] creating or updating user: constraint failed: UNIQUE constraint failed: users.name
Opened
#967 [Bug] Headscale exit node won´t let me access the internet when limited to specific user
Opened
#968 [Bug] Headscale v25.1 or Tailscale 1.70+ causes NCSI (Network Status) to appear offline
Opened
#969 [Bug] re-assigen node to new user THEN new user can not see this node
Opened
#970 [Bug] Internal server error when logging in using Google OIDC
Opened
#971 [Bug] CLI could not connect to a server
Opened
#972 [Bug] Delete does not work from docker terminal exits
Opened
#973 [Bug] Error out on unknown symbol for policy v2
Opened
#974 [Bug] Primary route no longer shown in CLI
Opened
#975 [Feature] transport layer offload optimisation
Opened
#976 [Bug] Docker - High CPU Usage - RATELIMIT lines in log
Opened
#977 [Bug] autoApprove works only after advertising and un-advertising and advertising again
Opened
#978 [Question] Is this supposed to be like this?
Opened
#979 [Feature] Add option to expire node on disconnect
Opened
#980 [Bug] Cannot create preauth keys for users without username
Opened
#981 [Bug] 'headscale' commands unusable under load
Opened
#982 [Feature] Provide a few suggestions or questions
Opened
#983 [Feature] Round robin for extra_dns
Opened
#984 [Bug] No exit node and device route don't work
Opened
#985 [Question] Node names in netmap do not have a dot appended to their FQDN
Opened
#986 [Bug] could not register node: node not found in registration cache
Opened
#987 [Feature] Better setup / install docs / avoid reinventing the wheel
Opened
#988 [Bug] SSL Certificate for the Headscale Documentation Site is Expired
Opened
#989 [Feature] Extra DNS Records / API support CNAME / wildcards
Opened
#990 [Bug] unaligned 64-bit atomic operation
Opened
#991 [Bug] <title>Error loading config - yaml line12 - not able to find key
Opened
#992 [Feature] Replacing encoding/json with https://github.com/bytedance/sonic
Opened
#993 [Feature] Query claims from OIDC UserInfo if not available in ID token
Opened
#994 [Bug] LetsEncrypt cache dir lost - unable to bring headscale back up.
Opened
#995 [Feature] update is disabled for modes other than 'database'
Opened
#996 [Bug] Pre-auth keys "user" field returns the email.
Opened
#997 [Bug] window client report：panic: runtime error: invalid memory address or nil pointer dereference
Opened
#998 [Feature] derper server supports namespace isolation
Opened
#999 [Bug] Failed to update 0.23.0 -> 0.24.x
Opened
#1000 tailscale cert + serve tracking
Opened
#1001 [Feature] add robots.txt to headscale
Opened
#1002 [Feature] Derper version
Opened
#1003 [Bug] headscale documentation regarding docker usage displays outdated information compared to the source code of the page
Opened
#1004 [Bug] PR Integration tests are failing due to legacy service shutdown on April 15, 2025
Opened
#1005 [Bug] autoApprove does not work from start
Opened
#1006 [Feature] Change node IP address
Opened
#1007 [Bug] load(migrate) policy v2 from file to database
Opened
#1008 Tailscale nodes unable to connect peer-to-peer due to ISP NAT mapping of server public IP, traffic always routed via DERP relay
Opened
#1009 [Feature] Raise on reference to invalid group in policy
Opened
#1010 [Bug] autoApprove does not work for 0.0.0.0/0 and ::/0
Opened
#1011 [Feature] Possibility of using a larger database connection pool (while still using the pure Go SQLite implementation)
Opened
#1012 [Bug] Last seen is missing in beta
Opened
#1013 [Bug] policy check complaining about users not being found in beta
Opened
#1014 [Feature] Synology support (tailscale client versions are behind)
Opened
#1015 [Bug] preauthkeys list - panic: strconv: illegal AppendInt/FormatInt base
Opened
#1016 [Feature] last_seen contains time zone
Opened
#1017 [Bug] PR #2474 can cause duplicate users
Opened
#1018 [Bug] OIDC via Cloudflare Access has incorrect username
Opened
#1019 [Bug] node randomly gets removed due to a panic
Opened
#1020 [Feature] In-Memory State Management
Opened
#1021 [Bug] Preauth key generation command line
Opened
#1022 [Feature] transitional page before redirecting to OIDC provider
Opened
#1023 [Bug] ACL User/Groups not working in v0.26.0
Opened
#1024 [Bug] tags and autoApprovers not working
Opened
#1025 [Feature] Reject invalid dst in policy
Opened
#1026 [Bug] v0.26 policy: reduce routes sent to peers based on packetfilter #2561
Opened
#1027 [Bug] Headscale fails to recognize ip_prefixes in config: "no IPv4 or IPv6 prefix configured, minimum one prefix is required" on clean install (v0.25.0/v0.26.0, Docker & native)
Opened
#1028 V0.26 Route List formatting
Opened
#1029 [Bug] libssl3 vulnerability - CVE-2024-13176
Opened
#1030 [Bug] Adding a tag via CLI removes advertised tag
Opened
#1031 [Feature] documentation for Android auth with auth key
Opened
#1032 Policy: autogroup support
Opened
#1033 [Bug] ACL invalid policy accepted
Opened
#1034 [Bug] headscale nodes backfillips flag not working
Opened
#1035 [Bug] Outdated packages in Nix
Opened
#1036 [Bug] Invalid ACL stored in DB, crash on startup
Opened
#1037 [Bug] Please link "Create a backup of your database." to relevant documentation.
Opened
#1038 [Bug] compilation errors
Opened
#1039 [Bug] Nodes Reported as Offline when Updating Routes
Opened
#1040 [Bug] -u --user argument is inconsistent, --identifier/--name unavailable (sometimes --user takes uint, sometimes string)
Opened
#1041 [Bug] Security Issue - Unwanted Control Plane client (bot/scraper/monitoring of users?)
Opened
#1042 [Bug] 0.26.0 Custom DERPs not seeing some tailnet nodes after update
Opened
#1043 [Bug] Group-based ACL not working for local users
Opened
#1044 [Bug] SSH autogroup:nonroot does not permit non-root usernames
Opened
#1045 [Feature] Add high-level server metrics
Opened
#1046 [Feature] ability to change device hostname
Opened
#1047 [Bug] nodes are duplicated after expiry and reauth
Opened
#1048 [Bug] confusing error message referencing "v2.Asterix"
Opened
#1049 [Bug] <title>How can i modify the IP address of the connected client
Opened
#1050 [Bug] Inconsistent handling of OIDC claims
Opened
#1051 headscale node list command shows client's "Last seen" in GMT even when system timezone set to Asia/Kolkata (IST, +0530)
Opened
#1052 [Bug] Apple TV tvOS will not connect
Opened
#1053 [Bug] loading ACL policy: check with a host results in *v2.Host not supported"
Opened
#1054 [Bug] Auto approve routes broken for tags
Opened
#1055 [Feature] shoe client version when list nodes
Opened
#1056 [Feature] Add expiration and status filtering support to nodes CLI command
Opened
#1057 [Bug] key is delivered to tailscale node for a long time (6-7 minutes) after re-authentication, traffic doesn't pass in this time
Opened
#1058 [Bug] SSH policy not working after update to 0.26.1
Opened
#1059 [Bug] Default ACLs differ from headscale
Opened
#1060 [Feature] delete/create multiple users/authkeys at once
Opened
#1061 [Bug] Sequential IP allocator increments when API register request fails
Opened
#1062 Feature Request: Config-level switch to disable node-key expiration (for long-lived IoT fleets)
Opened
#1063 [Feature] Advertises a STUN port different from the one it listens on
Opened
#1064 [Feature] MDM
Opened
#1065 [Bug] re-authentication doesn't work, new node key is unknown
Opened
#1066 [Bug] Any DB error on getting node during serving stream updates leads to panic and further delays
Opened
#1067 [Feature] multiple replicas of headscale instances
Opened
#1068 [Bug] Part of network not avail when the DERP list load is failed
Opened
#1069 [Bug] Updating of existing channel leads to unexpected removing of ephemeral nodes
Opened
#1070 [Bug] Headscale embedded Derper Server speed slow
Opened
#1071 [Bug] headscale generate private-key requires a config.yaml file (even if empty)
Opened
#1072 [Bug] <title>register node err msg:registration ID must be 24 characters long
Opened
#1073 [Feature] Multi-tenancy, multiple tailnets and fine grained api authorization support
Opened
#1074 [Bug] Connection times out
Opened
#1075 [Feature] Helm Chart
Opened
#1076 [Bug] panic in serveLongPoll after ephemeral node deletion ("invalid memory address or nil pointer dereference")
Opened
#1077 [Bug] Internal server error on /debug/registration-cache
Opened
#1078 [Bug] no IPv4 or IPv6 prefix configured, minimum one prefix is required
Opened
#1079 [Bug] Unable to register ephemeral nodes using OIDC
Opened
#1080 ACL issue with username
Opened
#1081 [Bug] Connection lost after another user/node join the tailnet
Opened
#1082 [Feature] Add support for the MagicDNSPeerAAAA Node Attribute
Opened
#1083 [Feature] FR: Better error-handling / debugging of expired SSL certificate in headscale server
Opened
#1084 IP segment settings, and I can't start it
Opened
#1085 [Bug] Internal server error on /verify
Opened
#1086 [Bug] Registration of duplicate NodeKeys leads to DoS / Spoofing
Opened
#1087 [Feature] Expose pending interactive registrations via admin API/CLI
Opened
#1088 [Feature] Machine sharing
Opened
#1089 [Feature] Hide inaccessible nodes from my devices
Opened
#1090 [Bug] Node registration via the api fails despite having valid args
Opened
#1091 [Bug] Enabling again a fallback node redundant routes made both main and fallback node routes primary=false
Opened
#1092 [Bug] Headscale serving subnet from offline node.
Opened
#1093 [Bug] Headscale hangs on SIGINT
Opened
#1094 [Bug] Headscale does not accept IPv6 addresses with brackets
Opened
#1095 [Bug] Headscale reads extra DNS records from path too early
Opened
#1096 [Bug] cant connect over ipv6 only connection
Opened
#1097 [Bug] If a computer set an invalid hostname, the entire network will be unavailable (re-emerging)
Opened
#1098 [Bug] tailscale switch hangs when using MagicDNS on FreeBSD and breakds whole system DNS resolution
Opened
#1099 [Bug] extra records (JSON) works only when names are in lowercase
Opened
#1100 [Feature] make version available in some kind of api output
Opened
#1101 [Bug] Unable to remove routes
Opened
#1102 [Bug] Node vanishes from the nodelist and is unreachable
Opened
#1103 [Bug] (SSH) Policy does not select any of the two when duplicate users are present
Opened
#1104 [Bug] Can't split access for different users/groups to different Tailscale exit nodes in 0.26.1
Opened
#1105 [Bug] Exit node is visible to nodes that aren't allowed to use it
Opened
#1106 [Feature] add favicon to web page(s)
Opened
#1107 [Feature] Please make version available through either api or web interfaceenhancement
Opened
#1108 [Bug] Running Tailscale client with exit node on the same host with Headscale slows uplink for connected clients.
Opened
#1109 Documentation for exit nodes is outdated
Opened
#1110 [Bug] Clients still contact log.tailscale.com when connected to headscale unless TS_NO_LOGS_NO_SUPPORT=true
Opened
#1111 [Bug] docker image does not have the "Created" time
Opened
#1112 [Feature] Configurable Handling of Hostname Conflicts for Ephemeral Nodes to Preserve MagicDNS Discoverability
Opened
#1113 [Bug] ACL with autogroup:self is only pushed after restart
Opened
#1114 [Bug] CLI last version checks
Opened
#1115 [Bug] Headscale API Bypasses Middleware Check
Opened
#1116 [Feature] Support "Use with exit node" feature for nameservers
Opened
#1117 Local Unbound not used
Opened
#1118 [Bug] v0.27.0 policy apply errors
Opened
#1119 [Bug] v0.27.0 crashes during v0.26.1 policy parsing
Opened
#1120 [Bug] Unsolicited node logout
Opened
#1121 [Bug] Error parsing ACLs since 0.27
Opened
#1122 [Bug] v0.27.0 Headscale break if I using litestream
Opened
#1123 [Bug] Unable to split access to exit nodes
Opened
#1124 [Bug] Clients display external headscale hostname rather than internal
Opened
#1125 [Bug] Unable to rename nodes
Opened
#1126 [Bug] DERP: derpport is ignored
Opened
#1127 [Bug] autogroup:self will cover other ACL rules
Opened
#1128 [Bug] v0.26.1 to v.27.0 sqlite failure with 'users' field
Opened
#1129 [Feature] Track for supporting Tailscale Peer Relays
Opened
#1130 [Bug] SQLite schema failed to validate
Opened
#1131 [Bug] Container doesn't begin serving, instead shows help and exits.
Opened
#1132 TestShuffleDERPMapDeterministic is flaky
Opened
#1133 [Feature] tailscale services
Opened
#1134 Headscale v0.27.0 not storing/propagating node endpoints - all connections forced through DERP relay
Opened
#1135 Tags cannot owner other tags
Opened
#1136 [Bug] Version 0.27.0 when using oidc doesn't respect expiry parameter on session lengths
Opened
#1137 [Bug] If an unknown user is added to the policy, SSH policies become empty
Opened
#1138 [Bug] headscale server + user credentials are not memorized by Tailscale client (macOS)
Opened
#1139 [Bug] sqlite3 migration failed: UNIQUE constraint failed
Opened
#1140 [Bug] v0.26.1 to v.27.0 sqlite failure with 'namespaces' table
Opened
#1141 [Bug] Upgrade from 0.26.1 --> 0.27.0 makes all clients unable to connect to headscale
Opened
#1142 [Bug] After upgrading to 0.27 pfSense cannot keep the login state when rebooting or restarting the Tailscale service
Opened
#1143 [Bug] metrics_listen_addr set to "" results in metrics listening on random port
Opened
#1144 [Bug] [Entra OIDC] missing code or state parameter / empty OIDC callback params
Opened
#1145 [Bug] Automatic route approval doesn't work for tagged preauth keys
Opened
#1146 [Bug] ACLs not applied on newly added nodes using OIDC
Opened
#1147 [Bug] Sometimes the advertised route is not set as primary route
Opened
#1148 [Bug] tailscale accept a local subnet
Opened
#1149 NixOS module: check policy as part of switch
Opened
#1150 [Bug] Different behavior depending on override_local_dns definition
Opened
#1151 Implement tailcfg.PingRequest
Opened
#1152 [Bug] Error parsing ACL entry "randomizeClientPort" in 0.27.1
Opened
#1153 [Feature] Hashed secrets
Opened
#1154 [Feature] Predictable IPs
Opened
#1155 [Feature] ARM64 FreeBSD Release artifacts?
Opened
#1156 [Feature] Please add a "column" "notes" to your objects.
Opened
#1157 [Feature] cli extension node list
Opened
#1158 [Bug] Used IPs are kept in memory for ephemeral nodes
Opened
#1159 [Feature] Can derper be set with priority?
Opened
#1160 [Feature] IP pool
Opened
#1161 [Feature] log errors from acme/autocert renewals
Opened
#1162 Can't register headscale as an alternate server
Opened
#1163 [Feature] Add optional feature to persist IsOnline field to database
Opened
#1164 [Bug] after removing node there are errors in the logs
Opened
#1165 [Bug] headscale nodes approve-routes list-routes -i flag doesn't filter by node ID
Opened
#1166 [Bug] Normalization of hostnames
Opened
#1167 [Bug] Can not delete user
Opened
#1168 [Feature] Hope the development version documentation can be merged as soon as possible
Opened
#1169 [Feature] Add Node-specific 'Connection Status' and 'Last Seen' Metrics
Opened
#1170 TestAuthenticationFlows is flaky
Opened
#1171 [Bug] Unknown users break group policies. Deleted users do not correctly propogate.
Opened
#1172 [Bug] No traffic until headscale restart (rejected due to acl )
Opened
#1173 [Client TLS certificates/ PKI for Headscale enrollment] supported or intentionally unsupported?
Opened
#1174 Tagged devices are not shown with the "tagged-devices" user
Opened
#1175 Tagged devices should have key expiry disabled
Opened
#1176 headscale nodes list does not always show user
Opened
#1177 [Bug] Preauthkey always requires a user
Opened
#1178 [Bug] CurAddr isn't updated on Windows clients when a Linux client is restarted
Opened
#1179 [Bug] Search domains don't consistently populate when restarting tailscale
Opened
#1180 [Bug] Adjust tag columns in nodes list
Opened
#1181 [Bug] Tag update is not sent to node
Opened
#1182 [Bug] Reauth to untag a device keeps it tagged
Opened
#1183 [Feature] Make more Features Optional
Opened
#1184 [Feature] Add support for OIDC in admin API
Opened
#1185 [PR #3] [MERGED] Bump ini from 1.3.5 to 1.3.8 in /frontend
Opened
#1186 [PR #1] [CLOSED] Bump websocket-extensions from 0.1.3 to 0.1.4 in /frontend
Opened
#1187 [PR #2] [MERGED] Add Dockerfile
Opened
#1188 [PR #4] [MERGED] minor readme typo
Opened
#1189 [PR #6] [MERGED] Add additional locations to look for the config.json file
Opened
#1190 [PR #7] [CLOSED] Handle relative paths in private_key_path and derp_map_path
Opened
#1191 [PR #9] [MERGED] Add support for TLS to the web service.
Opened
#1192 [PR #8] [MERGED] Handle relative paths in private_key_path and derp_map_path
Opened
#1193 [PR #10] [MERGED] Linter warnings
Opened
#1194 [PR #11] [MERGED] fix: remove db twice
Opened
#1195 [PR #12] [MERGED] Add a Gitter chat badge to README.md
Opened
#1196 [PR #15] [MERGED] Add first tests
Opened
#1197 [PR #13] [MERGED] Add a Makefile with a few targets.
Opened
#1198 [PR #16] [MERGED] Reorganise the CLI structure
Opened
#1199 [PR #17] [MERGED] Namespace is now a flag for all the commands
Opened
#1200 [PR #18] [MERGED] Add a basic CI workflow with github actions
Opened
#1201 [PR #19] [MERGED] List nodes in namespace + register under node command
Opened
#1202 [PR #20] [MERGED] Preauthkeys improvements
Opened
#1203 [PR #21] [MERGED] Support for pre auth keys
Opened
#1204 [PR #22] [MERGED] Added JSON-formatted output to CLI
Opened
#1205 [PR #25] [CLOSED] Added the first integration test with the official Tailscale client
Opened
#1206 [PR #24] [MERGED] Add a DestroyNamespace command and tests for the Namespace functions.
Opened
#1207 [PR #26] [MERGED] Add more tests
Opened
#1208 [PR #28] [MERGED] Adding SQLite support
Opened
#1209 [PR #27] [MERGED] Remove dependency on Postgres' jsonb field
Opened
#1210 [PR #31] [MERGED] Improving how headscale handles the client startup process
Opened
#1211 [PR #30] [MERGED] a bunch of smaller fixes
Opened
#1212 [PR #29] [MERGED] Add support for ephemeral nodes via a special type of pre-auth key.
Opened
#1213 [PR #33] [MERGED] Handle client sending new NodeKey
Opened
#1214 [PR #34] [MERGED] Fix a race condition when a client closes the connection
Opened
#1215 [PR #35] [MERGED] Use goreleaser to generate binary builds
Opened
#1216 [PR #38] [MERGED] Add k8s deployment, standalone app Dockerfile.
Opened
#1217 [PR #40] [MERGED] Fix nil dereference in nodes list command.
Opened
#1218 [PR #41] [MERGED] Migrate to GORM 2.0
Opened
#1219 [PR #42] [MERGED] Update Headscale to Tailscale 1.10
Opened
#1220 [PR #43] [MERGED] Change all commands to plural words
Opened
#1221 [PR #45] [MERGED] Use gorm connection pool
Opened
#1222 [PR #44] [MERGED] Add support for Policy ACLs
Opened
#1223 [PR #46] [MERGED] Update DERP server definitions
Opened
#1224 [PR #47] [MERGED] Added HTTP responses on map errors
Opened
#1225 [PR #48] [MERGED] Improving namespace/user support
Opened
#1226 [PR #51] [MERGED] Fix minor typo
Opened
#1227 [PR #54] [MERGED] Implement node deletion
Opened
#1228 [PR #55] [MERGED] Turn the combination of TLS-ALPN-01 and listen_addr on a port other than
Opened
#1229 [PR #57] [CLOSED] Added init subcommand to generate base config
Opened
#1230 [PR #60] [MERGED] Add some more detail to the README about the different Let's Encrypt
Opened
#1231 [PR #61] [MERGED] Refactor cmdVersion to cli package
Opened
#1232 [PR #59] [MERGED] Add a 'tls_letsencrypt_listen' config option
Opened
#1233 [PR #63] [MERGED] Added communication between Serve and CLI using KV table
Opened
#1234 [PR #62] [MERGED] Topic/refactor config
Opened
#1235 [PR #66] [MERGED] Remove old docker code
Opened
#1236 [PR #67] [MERGED] Fix typo in example
Opened
#1237 [PR #69] [MERGED] Use 8080 as default port in the example config
Opened
#1238 [PR #72] [MERGED] Make IP Prefix configurable and available ip deterministic
Opened
#1239 [PR #74] [MERGED] Switch to a structured logger
Opened
#1240 [PR #75] [MERGED] Fix deadlock issue
Opened
#1241 [PR #76] [MERGED] Try to detect color support, make color configurable
Opened
#1242 [PR #77] [MERGED] Remove more deadlocks
Opened
#1243 [PR #79] [MERGED] Correct a typo in routes.go
Opened
#1244 [PR #80] [MERGED] Add CLI command to mark preauthkeys as expired
Opened
#1245 [PR #82] [MERGED] Also notify peers when deleting ephemerals
Opened
#1246 [PR #81] [MERGED] Add Integration tests
Opened
#1247 [PR #83] [MERGED] Improve reliability of PollMapHandler, more integration tests
Opened
#1248 [PR #84] [MERGED] Improve logic to keep nodes up to date with the network state
Opened
#1249 [PR #86] [MERGED] Improve tables in CLI
Opened
#1250 [PR #89] [MERGED] Topic/docker release
Opened
#1251 [PR #87] [MERGED] Send notifications when enabling a route
Opened
#1252 [PR #92] [MERGED] Enhance route command with ptables and multiple routes
Opened
#1253 [PR #94] [MERGED] Split lint and test CI files
Opened
#1254 [PR #96] [MERGED] Fix setting of version
Opened
#1255 [PR #99] [MERGED] Use explicit version in Dockerfile
Opened
#1256 [PR #101] [MERGED] fix: check last seen time without possible null pointer
Opened
#1257 [PR #98] [MERGED] Initial DNS server support
Opened
#1258 [PR #102] [MERGED] docs: add notes on how to build own DERP server
Opened
#1259 [PR #103] [MERGED] Add support for sharing nodes across namespaces
Opened
#1260 [PR #109] [MERGED] Update to Tailscale 1.14
Opened
#1261 [PR #108] [MERGED] Dockerfile: add golang tag
Opened
#1262 [PR #107] [MERGED] Remove trace lines about NO_COLOR.
Opened
#1263 [PR #112] [MERGED] fix typo, it is 'relayed' not 'relied'
Opened
#1264 [PR #111] [MERGED] fix typo
Opened
#1265 [PR #113] [MERGED] Apple macOS profile support
Opened
#1266 [PR #114] [MERGED] Improve integration tests
Opened
#1267 [PR #115] [MERGED] Topic/fix docu
Opened
#1268 [PR #116] [MERGED] workflows/release: add docker full version tag
Opened
#1269 [PR #120] [MERGED] Fix namespace instructions in README.md
Opened
#1270 [PR #126] [MERGED] Initial work on OIDC (SSO) integration
Opened
#1271 [PR #121] [MERGED] New integration test for tailscale 1.14
Opened
#1272 [PR #122] [MERGED] Add support for Taildrop (file sharing)
Opened
#1273 [PR #128] [MERGED] Added version checker on Headscale startup
Opened
#1274 [PR #129] [MERGED] Add support for MagicDNS
Opened
#1275 [PR #131] [MERGED] fix some typos in README
Opened
#1276 [PR #134] [MERGED] Attempt to improve update/long polling stability
Opened
#1277 [PR #130] [CLOSED] Allow preauthkeys to specify a subnet for machine to join
Opened
#1278 [PR #135] [MERGED] Fix a few typos in the tailscale command line arguments.
Opened
#1279 [PR #136] [MERGED] Code, pointer, variable cleanups. And metrics!
Opened
#1280 [PR #139] [MERGED] Make sure that goreleaser uses the appropriate version string when
Opened
#1281 [PR #140] [MERGED] Add the ability to specify the directory URL used for ACME.
Opened
#1282 [PR #137] [CLOSED] Fix goreleaser version
Opened
#1283 [PR #141] [MERGED] Document client OS support in a table
Opened
#1284 [PR #142] [MERGED] Simplify update logic
Opened
#1285 [PR #145] [MERGED] Remove gitter for discord
Opened
#1286 [PR #147] [MERGED] Fix error 500 when deleting a shared node
Opened
#1287 [PR #144] [MERGED] Add CI builds with artifacts for PRs and main
Opened
#1288 [PR #155] [MERGED] Add JSON output when deleting node
Opened
#1289 [PR #150] [MERGED] Fix shared nodes
Opened
#1290 [PR #156] [MERGED] Disable version checker when using JSON output
Opened
#1291 [PR #157] [CLOSED] Show if an authkey has been used already in the CLI
Opened
#1292 [PR #159] [MERGED] Add field AlreadyUsed to AuthKeys
Opened
#1293 [PR #166] [MERGED] Improve help message to expire key
Opened
#1294 [PR #165] [MERGED] Show JSON on error when expiring key
Opened
#1295 [PR #169] [MERGED] Generate arm64 binaries in goreleaser
Opened
#1296 [PR #171] [MERGED] Added --force flag on node delete
Opened
#1297 [PR #167] [MERGED] Preload AuthKey Namespace on list nodes
Opened
#1298 [PR #172] [MERGED] Rename namespaces
Opened
#1299 [PR #174] [MERGED] Fix MagicDNS base domain
Opened
#1300 [PR #176] [MERGED] Bugfix: the check to see if a node was already shared into a namespace
Opened
#1301 [PR #178] [MERGED] Apply some DRY to the sharing tests.
Opened
#1302 [PR #177] [MERGED] Cli unshare node
Opened
#1303 [PR #183] [MERGED] Add support for Split DNS (Restricted Nameservers)
Opened
#1304 [PR #182] [CLOSED] Golang ci lint config
Opened
#1305 [PR #185] [CLOSED] fix apple configuration profile links
Opened
#1306 [PR #184] [MERGED] Move documentation away from README and use YAML everywhere
Opened
#1307 [PR #187] [MERGED] Use CGO_ENABLED=1 when building arm64
Opened
#1308 [PR #188] [MERGED] Fixed ARM64 compiler name
Opened
#1309 [PR #190] [MERGED] Fix arm64 (now for good)
Opened
#1310 [PR #193] [MERGED] Another fix for the contributors section in README
Opened
#1311 [PR #191] [MERGED] Fix contributors
Opened
#1312 [PR #192] [MERGED] fix typo in docs
Opened
#1313 [PR #196] [MERGED] Add ability to fetch DERP from url and file
Opened
#1314 [PR #194] [MERGED] docs(README): update contributors
Opened
#1315 [PR #199] [MERGED] update Running.md
Opened
#1316 [PR #197] [MERGED] Unify configuration, comment the options in config
Opened
#1317 [PR #200] [MERGED] Cli improvements -- nodes subcommand
Opened
#1318 [PR #202] [MERGED] Add note about main containing unreleased changes
Opened
#1319 [PR #204] [MERGED] Initial work preparing for API/gRPC
Opened
#1320 [PR #208] [MERGED] Support for IPv6 prefixes in namespaces
Opened
#1321 [PR #206] [MERGED] Prepare and show gRPC usage in CLI
Opened
#1322 [PR #207] [MERGED] docs(README): update contributors
Opened
#1323 [PR #209] [CLOSED] Enable prerelease support on goreleaser
Opened
#1324 [PR #212] [MERGED] Rework the CLI to use gRPC
Opened
#1325 [PR #213] [MERGED] Typo in golang URL
Opened
#1326 [PR #214] [MERGED] Using distroless base image for Docker
Opened
#1327 [PR #223] [MERGED] Setup lint and format of Go, Proto and yaml/markdown
Opened
#1328 [PR #224] [MERGED] Improvements for namespace deletion
Opened
#1329 [PR #225] [MERGED] arm64 docker image build in release process
Opened
#1330 [PR #229] [MERGED] Upgrade Tailscale version to 1.18.x
Opened
#1331 [PR #230] [MERGED] Running.md: fix missing backslash (\)
Opened
#1332 [PR #227] [MERGED] Simplify and improve register/reauth flow
Opened
#1333 [PR #231] [CLOSED] Update Running.md
Opened
#1334 [PR #236] [MERGED] fix(derp-example): change regionid in node
Opened
#1335 [PR #238] [MERGED] Revert postgres constant value
Opened
#1336 [PR #237] [MERGED] Fix default preauthkey expiration
Opened
#1337 [PR #239] [MERGED] The create-node subcommand under debug needs a 64 character key.
Opened
#1338 [PR #241] [MERGED] Enable marking releases as prerelease
Opened
#1339 [PR #242] [MERGED] Add initial CHANGELOG
Opened
#1340 [PR #243] [MERGED] Add GitHub Issue and Pull request templates
Opened
#1341 [PR #247] [MERGED] Add private_key_path to example config
Opened
#1342 [PR #245] [MERGED] fix typo
Opened
#1343 [PR #248] [MERGED] Ignoe derp.yaml, don't panic in Serve()
Opened
#1344 [PR #250] [MERGED] Use go1.17 in goreleaser as required my go mod
Opened
#1345 [PR #256] [MERGED] Prepare CHANGELOG for 0.12.1
Opened
#1346 [PR #258] [MERGED] Fix docker release
Opened
#1347 [PR #255] [MERGED] Template Fixes
Opened
#1348 [PR #262] [MERGED] Rewrite main documentation
Opened
#1349 [PR #261] [MERGED] Add note about outdated docs until we fix them
Opened
#1350 [PR #268] [MERGED] Prepare CHANGELOG for 0.12.2
Opened
#1351 [PR #263] [MERGED] Improve Docker docs
Opened
#1352 [PR #267] [MERGED] Fix example config link
Opened
#1353 [PR #270] [MERGED] Add docker alpine image
Opened
#1354 [PR #271] [MERGED] Minor security updates in go.mod
Opened
#1355 [PR #273] [MERGED] Add new tailscale version to integration test
Opened
#1356 [PR #274] [MERGED] Strip binary, update to go-1.17.6
Opened
#1357 [PR #272] [MERGED] Prepare CHANGELOG for 0.12.3
Opened
#1358 [PR #276] [MERGED] Fix doc typos
Opened
#1359 [PR #278] [MERGED] PollNetMapStream: do not create any rows during long-poll operation
Opened
#1360 [PR #289] [MERGED] Trim whitespace from privateKey before parsing
Opened
#1361 [PR #281] [CLOSED] fix wrong condition
Opened
#1362 [PR #282] [MERGED] Fix missing return in PollNetMapHandler
Opened
#1363 [PR #290] [MERGED] Add generate private-key command
Opened
#1364 [PR #291] [MERGED] Upgrade to latest tailscale
Opened
#1365 [PR #297] [MERGED] Configurable mtls
Opened
#1366 [PR #292] [MERGED] Make Unix socket permissions configurable
Opened
#1367 [PR #299] [MERGED] Tag 0.12.4 in CHANGELOG
Opened
#1368 [PR #300] [MERGED] Typo
Opened
#1369 [PR #301] [MERGED] Set goreleaser to only care about Go 1.17
Opened
#1370 [PR #303] [MERGED] Migrate ip_address field to ip_addresses
Opened
#1371 [PR #305] [MERGED] Note when running as another user in systemd
Opened
#1372 [PR #302] [MERGED] Set up build avoidance
Opened
#1373 [PR #306] [MERGED] Introduce API keys and enable remote control API
Opened
#1374 [PR #311] [MERGED] Issues with current ACL implementation and solution proposal
Opened
#1375 [PR #312] [MERGED] poll: fix swapped machine<->namespace labels
Opened
#1376 [PR #314] [MERGED] Upgrade to tailscale 1.20.4
Opened
#1377 [PR #315] [MERGED] Improve the windows client docs as per discord recommendations
Opened
#1378 [PR #316] [MERGED] Remove kv-namespace-worker
Opened
#1379 [PR #313] [MERGED] Add docs on how to set up Windows clients
Opened
#1380 [PR #319] [CLOSED] Fix errror in kustomize init.bash
Opened
#1381 [PR #317] [MERGED] Setup Sponsor button
Opened
#1382 [PR #320] [MERGED] Improvements on the ACLs and bug fixing
Opened
#1383 [PR #321] [MERGED] Topic/specific go version
Opened
#1384 [PR #324] [MERGED] Update README.md
Opened
#1385 [PR #325] [MERGED] Update changelog for 0.13.0
Opened
#1386 [PR #330] [MERGED] Add ohdearaugustin to CODEOWNERS for config and docs
Opened
#1387 [PR #332] [MERGED] Fix spelling error
Opened
#1388 [PR #333] [MERGED] Topic/renovatebot
Opened
#1389 [PR #334] [MERGED] CODEOWNER: add renovate config ohdearaugustin
Opened
#1390 [PR #337] [CLOSED] workflows/contributors: rm PR config
Opened
#1391 [PR #336] [MERGED] contributor: set specific version
Opened
#1392 [PR #338] [MERGED] docs(README): update contributors
Opened
#1393 [PR #345] [MERGED] docs(README): update contributors
Opened
#1394 [PR #344] [MERGED] Make /metrics listen on a different address
Opened
#1395 [PR #347] [MERGED] Remove the concept of "shared nodes"
Opened
#1396 [PR #348] [MERGED] fix(machine): remove comment
Opened
#1397 [PR #346] [MERGED] Fix ip allocation bug, make integration tests faster
Opened
#1398 [PR #350] [MERGED] Feat OIDC login as namespace
Opened
#1399 [PR #349] [MERGED] Remove dependency on CGO
Opened
#1400 [PR #352] [CLOSED] fix(deps): update go modules
Opened
#1401 [PR #351] [MERGED] Added FreeBSD to the supported clients
Opened
#1402 [PR #355] [CLOSED] docs(README): update contributors
Opened
#1403 [PR #357] [MERGED] Remove boundaries between Namespaces
Opened
#1404 [PR #359] [MERGED] Add YAML support to ACLs
Opened
#1405 [PR #369] [MERGED] Update dependencies
Opened
#1406 [PR #368] [MERGED] Fix apple profile issue being generated with escaped characters
Opened
#1407 [PR #370] [CLOSED] Fix could not create namespace OIDC
Opened
#1408 [PR #366] [MERGED] Registration simplification
Opened
#1409 [PR #371] [MERGED] Use specific types for Machine
Opened
#1410 [PR #373] [MERGED] feat(acls): normalize the group name
Opened
#1411 [PR #375] [MERGED] Fix limitations in source acls rules
Opened
#1412 [PR #376] [MERGED] Add some shorthand aliases for commands+subcommands
Opened
#1413 [PR #377] [MERGED] Make contributor pipeline smarter
Opened
#1414 [PR #378] [CLOSED] docs(README): update contributors
Opened
#1415 [PR #381] [MERGED] docs(README): update contributors
Opened
#1416 [PR #379] [MERGED] Second contributor attempt
Opened
#1417 [PR #380] [MERGED] docs(README): update contributors
Opened
#1418 [PR #382] [CLOSED] docs(README): update contributors
Opened
#1419 [PR #384] [MERGED] feat(acls): add some logs and skip error
Opened
#1420 [PR #387] [MERGED] Fix magic dns and uppercase letters
Opened
#1421 [PR #388] [MERGED] Add an embedded DERP server to Headscale
Opened
#1422 [PR #385] [CLOSED] docs(README): update contributors
Opened
#1423 [PR #389] [MERGED] docs: fix typo in ACME challenge type comment
Opened
#1424 [PR #391] [CLOSED] docs(README): update contributors
Opened
#1425 [PR #392] [MERGED] Add /windows endpoint for Windows configuration + /apple endpoint cleanup
Opened
#1426 [PR #393] [MERGED] docs(README): update contributors
Opened
#1427 [PR #394] [MERGED] chore(deps): update dependency docker.io/golang to v1.17.8
Opened
#1428 [PR #398] [CLOSED] docs(README): update contributors
Opened
#1429 [PR #395] [CLOSED] fix(deps): update go modules
Opened
#1430 [PR #484] [MERGED] Fix checkboxes in PR template
Opened
#1431 [PR #483] [CLOSED] docs(README): update contributors
Opened
#1432 [PR #482] [MERGED] Add Nix reproducible build system
Opened
#1433 [PR #485] [CLOSED] docs(README): update contributors
Opened
#1434 [PR #486] [MERGED] Make register html template consistent with other endpoints
Opened
#1435 [PR #488] [MERGED] docs(README): update contributors
Opened
#1436 [PR #490] [CLOSED] Ignore expired machine records - closes #489
Opened
#1437 [PR #487] [CLOSED] docs(README): update contributors
Opened
#1438 [PR #493] [CLOSED] Refresh expired machine on re-auth - closes #489
Opened
#1439 [PR #494] [CLOSED] Regression bug fix when re-authenticating machine with auth-key
Opened
#1440 [PR #495] [MERGED] Regression bug fix when re-authenticating machine with auth-key
Opened
#1441 [PR #498] [CLOSED] Machine rename support
Opened
#1442 [PR #496] [MERGED] docs(README): update contributors
Opened
#1443 [PR #499] [MERGED] Make STUN run by default when embedded DERP is enabled
Opened
#1444 [PR #500] [MERGED] Fix API access
Opened
#1445 [PR #501] [CLOSED] docs(README): update contributors
Opened
#1446 [PR #505] [MERGED] Fixed docs metrics default endpoint
Opened
#1447 [PR #507] [MERGED] docs(README): update contributors
Opened
#1448 [PR #509] [MERGED] Upgrade to Go 1.18
Opened
#1449 [PR #510] [MERGED] Docs: Improve ACLs documentation
Opened
#1450 [PR #511] [MERGED] fix(oidc): Reset expiry for reauthentication
Opened
#1451 [PR #512] [MERGED] feat(oidc): add debug log
Opened
#1452 [PR #513] [MERGED] Add Tailscale unstable channel and repo HEAD to integration tests
Opened
#1453 [PR #516] [CLOSED] docs(README): update contributors
Opened
#1454 [PR #514] [MERGED] fix: possible panic in Headscale.scheduledDERPMapUpdateWorker
Opened
#1455 [PR #518] [MERGED] docs(README): update contributors
Opened
#1456 [PR #519] [MERGED] Fix labels cardinality error when registering unknown pre-auth key
Opened
#1457 [PR #517] [MERGED] Prepare CHANGELOG for v0.15.0
Opened
#1458 [PR #528] [MERGED] docs(README): update contributors
Opened
#1459 [PR #521] [MERGED] Docker docs enhancements
Opened
#1460 [PR #531] [MERGED] Suggest English as common language in GitHub interactions
Opened
#1461 [PR #534] [MERGED] fix: Remove days from expiry option value examples
Opened
#1462 [PR #529] [CLOSED] Implement TS2021 (Tailscale control protocol v2)
Opened
#1463 [PR #535] [CLOSED] docs(README): update contributors
Opened
#1464 [PR #537] [MERGED] Exit Headscale if ACL policy file cannot be parsed
Opened
#1465 [PR #538] [MERGED] Fix wrong metrics port in docs
Opened
#1466 [PR #540] [MERGED] Fix key name about derp port in derp-example.yml
Opened
#1467 [PR #539] [CLOSED] docs(README): update contributors
Opened
#1468 [PR #542] [MERGED] fixed the issue of sending on closed channel
Opened
#1469 [PR #541] [MERGED] docs(README): update contributors
Opened
#1470 [PR #547] [CLOSED] docs(README): update contributors
Opened
#1471 [PR #544] [MERGED] Makefile improvements
Opened
#1472 [PR #545] [MERGED] fix discord invite
Opened
#1473 [PR #548] [CLOSED] docs(README): update contributors
Opened
#1474 [PR #549] [CLOSED] docs(README): update contributors
Opened
#1475 [PR #553] [MERGED] Update discord link so it does not grant temp memberships
Opened
#1476 [PR #551] [MERGED] Clarified systemd friendly path
Opened
#1477 [PR #554] [CLOSED] docs(README): update contributors
Opened
#1478 [PR #555] [CLOSED] docs(README): update contributors
Opened
#1479 [PR #556] [MERGED] docs(README): update contributors
Opened
#1480 [PR #557] [MERGED] remove necessary buf installation
Opened
#1481 [PR #558] [MERGED] Add command to force tags on nodes and list tags
Opened
#1482 [PR #559] [MERGED] Upgrade dependencies and new tailscale
Opened
#1483 [PR #560] [MERGED] Rework hostname handling
Opened
#1484 [PR #565] [MERGED] Allow more configuration over the OIDC flow
Opened
#1485 [PR #566] [MERGED] Do not setLastStateChangeToNow every expireEphemeralNodesWorker call
Opened
#1486 [PR #568] [MERGED] Reduce the number of containers in integration tests
Opened
#1487 [PR #570] [MERGED] docs(README): update contributors
Opened
#1488 [PR #569] [MERGED] Command for moving nodes between namespaces
Opened
#1489 [PR #573] [MERGED] fixed typo
Opened
#1490 [PR #574] [MERGED] show ipv4 address first in node list
Opened
#1491 [PR #575] [CLOSED] docs(README): update contributors
Opened
#1492 [PR #578] [MERGED] Add --all (-a) flag to enable routes command (implements #360)
Opened
#1493 [PR #576] [MERGED] docs(README): update contributors
Opened
#1494 [PR #577] [CLOSED] Use env variable TZ to set timezone, fallback to UTC
Opened
#1495 [PR #579] [CLOSED] Use env variable TZ to set timezone, fallback to UTC (updated)
Opened
#1496 [PR #580] [CLOSED] allow the user to see their node tags from cli using --show-tags
Opened
#1497 [PR #581] [CLOSED] added cli options to output ACLs
Opened
#1498 [PR #584] [CLOSED] docs(README): update contributors
Opened
#1499 [PR #583] [CLOSED] add command argument --show-routes to node list.
Opened
#1500 [PR #585] [CLOSED] docs(README): update contributors
Opened
#1501 [PR #586] [CLOSED] docs(README): update contributors
Opened
#1502 [PR #587] [CLOSED] Cache nix and go deps
Opened
#1503 [PR #590] [MERGED] typo
Opened
#1504 [PR #589] [CLOSED] Adding DataDog tracer
Opened
#1505 [PR #591] [MERGED] link fix
Opened
#1506 [PR #592] [CLOSED] docs(README): update contributors
Opened
#1507 [PR #593] [MERGED] docs(README): update contributors
Opened
#1508 [PR #594] [MERGED] docs(README): update contributors
Opened
#1509 [PR #595] [MERGED] docs(README): update contributors
Opened
#1510 [PR #596] [MERGED] Allow headscale to enable/disable logtail
Opened
#1511 [PR #597] [MERGED] Check errors for Database calls
Opened
#1512 [PR #598] [MERGED] Use Prometheus duration parser
Opened
#1513 [PR #599] [MERGED] Update changelog for duration change
Opened
#1514 [PR #600] [CLOSED] Improve signal handling
Opened
#1515 [PR #601] [MERGED] Allow ACLs to be reloaded with SIGHUP
Opened
#1516 [PR #602] [MERGED] Fix forced Tags with legitimate tagOwners
Opened
#1517 [PR #605] [CLOSED] docs(README): update contributors
Opened
#1518 [PR #606] [CLOSED] docs(README): update contributors
Opened
#1519 [PR #607] [MERGED] docs(README): update contributors
Opened
#1520 [PR #609] [MERGED] Drop arm32 (armhf) for linux and add Darwin arm64
Opened
#1521 [PR #610] [MERGED] some GOOS do not support pie build, detect in makefile and fall back to non-pie build
Opened
#1522 [PR #608] [MERGED] Cleanup the configuration loading
Opened
#1523 [PR #611] [MERGED] OpenBSD doc
Opened
#1524 [PR #612] [MERGED] Override config file via cli
Opened
#1525 [PR #613] [CLOSED] docs(README): update contributors
Opened
#1526 [PR #615] [MERGED] fix typo for GGO->CGO
Opened
#1527 [PR #618] [MERGED] Update ACL syntax and add support for protocol filtering
Opened
#1528 [PR #616] [MERGED] docs(README): update contributors
Opened
#1529 [PR #619] [MERGED] Use strings.Cut to simplify logic
Opened
#1530 [PR #620] [CLOSED] Add bradfitz's iOS MDM hint to readme
Opened
#1531 [PR #621] [CLOSED] docs(README): update contributors
Opened
#1532 [PR #622] [CLOSED] namespaces are tailnets
Opened
#1533 [PR #624] [MERGED] Add ability to set randomizeClientPort
Opened
#1534 [PR #625] [CLOSED] docs(README): update contributors
Opened
#1535 [PR #627] [CLOSED] docs(README): update contributors
Opened
#1536 [PR #628] [MERGED] Update all nodes after ACL has been reloaded with sighup
Opened
#1537 [PR #629] [CLOSED] docs(README): update contributors
Opened
#1538 [PR #630] [MERGED] Add 1.26 to tests
Opened
#1539 [PR #631] [CLOSED] docs(README): update contributors
Opened
#1540 [PR #632] [MERGED] docs(README): update contributors
Opened
#1541 [PR #636] [MERGED] fix issue 635
Opened
#1542 [PR #633] [CLOSED] docs(README): update contributors
Opened
#1543 [PR #637] [CLOSED] docs(README): update contributors
Opened
#1544 [PR #638] [MERGED] Simplify DERP maps update function
Opened
#1545 [PR #640] [CLOSED] docs(README): update contributors
Opened
#1546 [PR #641] [MERGED] docs(README): update contributors
Opened
#1547 [PR #639] [MERGED] Fix obtuse "ephemeral_node_inactivity_timeout" error
Opened
#1548 [PR #642] [MERGED] Ignore new dump file
Opened
#1549 [PR #643] [MERGED] Fix occasional panic on registration
Opened
#1550 [PR #645] [CLOSED] Implement TS2021
Opened
#1551 [PR #646] [MERGED] docs(README): update contributors
Opened
#1552 [PR #648] [MERGED] Send Online field of tailcfg.Node based on LastSeen
Opened
#1553 [PR #654] [MERGED] Add version info to binary in Docker container
Opened
#1554 [PR #651] [MERGED] add timeout for http shutdown, add db disconnect
Opened
#1555 [PR #655] [CLOSED] docs(README): update contributors
Opened
#1556 [PR #656] [MERGED] Drop Gin as web framework for TS2019 API
Opened
#1557 [PR #658] [MERGED] Quick fix to segfault on CLI when Headscale is not running
Opened
#1558 [PR #664] [CLOSED] docs(README): update contributors
Opened
#1559 [PR #665] [MERGED] docs(README): update contributors
Opened
#1560 [PR #666] [CLOSED] add flags for headscale serve to provide initial api key
Opened
#1561 [PR #667] [MERGED] Make integration tests retry on failure.
Opened
#1562 [PR #668] [MERGED] graceful shutdown fix
Opened
#1563 [PR #675] [MERGED] Make tailnet updates check interval configurable
Opened
#1564 [PR #670] [MERGED] ping db in health check
Opened
#1565 [PR #676] [MERGED] docs(README): update contributors
Opened
#1566 [PR #677] [MERGED] remove gin completely, ~2MB reduction on final binary
Opened
#1567 [PR #680] [MERGED] Topic/speedup build
Opened
#1568 [PR #683] [MERGED] docs(README): update contributors
Opened
#1569 [PR #684] [MERGED] Fix API router
Opened
#1570 [PR #685] [MERGED] Decompose OIDCCallback method
Opened
#1571 [PR #686] [MERGED] docs(README): update contributors
Opened
#1572 [PR #688] [MERGED] Prepare changelog structure for 0.17.0
Opened
#1573 [PR #687] [MERGED] more intuitive output of node ls
Opened
#1574 [PR #689] [MERGED] Remove duplicate tags if sent by the client
Opened
#1575 [PR #691] [CLOSED] docs(README): update contributors
Opened
#1576 [PR #692] [MERGED] Update runc dependencies to fix security notification
Opened
#1577 [PR #693] [CLOSED] docs(README): update contributors
Opened
#1578 [PR #694] [CLOSED] docs(README): update contributors
Opened
#1579 [PR #696] [CLOSED] docs(README): update contributors
Opened
#1580 [PR #697] [CLOSED] docs(README): update contributors
Opened
#1581 [PR #698] [MERGED] Export API errors
Opened
#1582 [PR #700] [CLOSED] Temporary fix integration tests with dedicated Dockerfile
Opened
#1583 [PR #701] [CLOSED] Fix integration test issues due to multi-arch
Opened
#1584 [PR #703] [MERGED] Update the readme and documentation with details on the Android app
Opened
#1585 [PR #708] [MERGED] Revert BuildKit (docker buildx) support
Opened
#1586 [PR #707] [MERGED] Fix bug in excludeCorrectlyTaggedNodes
Opened
#1587 [PR #709] [CLOSED] docs(README): update contributors
Opened
#1588 [PR #710] [MERGED] Improvements in integration tests
Opened
#1589 [PR #711] [MERGED] typo fixed from advertised to advertise
Opened
#1590 [PR #712] [CLOSED] docs(README): update contributors
Opened
#1591 [PR #713] [MERGED] Update buf setup action for proto-lint
Opened
#1592 [PR #714] [CLOSED] docs(README): update contributors
Opened
#1593 [PR #715] [CLOSED] docs(README): update contributors
Opened
#1594 [PR #716] [CLOSED] docs(README): update contributors
Opened
#1595 [PR #719] [CLOSED] docs(README): update contributors
Opened
#1596 [PR #718] [CLOSED] docs(README): update contributors
Opened
#1597 [PR #720] [MERGED] Replaced legacy ioutil usage
Opened
#1598 [PR #721] [CLOSED] docs(README): update contributors
Opened
#1599 [PR #722] [MERGED] Update dependencies versions
Opened
#1600 [PR #723] [CLOSED] docs(README): update contributors
Opened
#1601 [PR #725] [MERGED] Improve registration protocol implementation and switch to NodeKey as main identifier
Opened
#1602 [PR #728] [CLOSED] docs(README): update contributors
Opened
#1603 [PR #729] [MERGED] Minor fix to linting issue introduced when fixing excludeCorrectlyTaggedNodes (#707)
Opened
#1604 [PR #730] [CLOSED] docs(README): update contributors
Opened
#1605 [PR #732] [CLOSED] docs(README): update contributors
Opened
#1606 [PR #735] [MERGED] Fix expired node registration URL
Opened
#1607 [PR #736] [MERGED] docs(README): update contributors
Opened
#1608 [PR #734] [MERGED] Add ability to connect to PostgreSQL via unix socket
Opened
#1609 [PR #737] [MERGED] Fixed another recurrence of MachineKey
Opened
#1610 [PR #738] [MERGED] Implement TS2021 protocol in headscale
Opened
#1611 [PR #739] [MERGED] Added changelog entries for 0.16.x
Opened
#1612 [PR #742] [CLOSED] docs(README): update contributors
Opened
#1613 [PR #743] [CLOSED] docs(proposals): add proposal for the ACL API
Opened
#1614 [PR #745] [MERGED] feat: add support for TLS with Postgres
Opened
#1615 [PR #746] [MERGED] Fix charset typo in swagger.go
Opened
#1616 [PR #747] [MERGED] Fix error decoding OIDC claims (#744)
Opened
#1617 [PR #748] [CLOSED] docs(README): update contributors
Opened
#1618 [PR #750] [CLOSED] docs(README): update contributors
Opened
#1619 [PR #751] [CLOSED] docs(README): update contributors
Opened
#1620 [PR #753] [CLOSED] docs(README): update contributors
Opened
#1621 [PR #754] [MERGED] Fix cli registration of expired machines
Opened
#1622 [PR #752] [MERGED] Create CODE_OF_CONDUCT.md
Opened
#1623 [PR #755] [CLOSED] docs(README): update contributors
Opened
#1624 [PR #756] [MERGED] Env config
Opened
#1625 [PR #757] [MERGED] Updated changelog for 0.16.4
Opened
#1626 [PR #759] [CLOSED] docs(README): update contributors
Opened
#1627 [PR #758] [CLOSED] docs(README): update contributors
Opened
#1628 [PR #760] [MERGED] docs(README): update contributors
Opened
#1629 [PR #763] [MERGED] Add support for autoApprovers ACL
Opened
#1630 [PR #765] [CLOSED] bugfix: Added base key validity period of 60 minutes.
Opened
#1631 [PR #767] [MERGED] Add support for PreAuthKey tags/automatic tagging
Opened
#1632 [PR #768] [MERGED] toggle json logging via config
Opened
#1633 [PR #769] [CLOSED] Added comments
Opened
#1634 [PR #770] [CLOSED] Fixes #766 Feature optional hostname suffix
Opened
#1635 [PR #771] [MERGED] Random suffix only on hostname collision in namespace.
Opened
#1636 [PR #772] [MERGED] Add Tailscale v1.30.0 to the integration test roaster
Opened
#1637 [PR #773] [CLOSED] docs(README): update contributors
Opened
#1638 [PR #776] [CLOSED] Target Go 1.19 for Headscale
Opened
#1639 [PR #778] [MERGED] Target Go 1.19 for Headscale
Opened
#1640 [PR #781] [MERGED] Switch to Nix unstable for Go 1.19
Opened
#1641 [PR #780] [MERGED] Target Tailscale version to v1.30.0 (and replace inet.af/netaddr with net/netip)
Opened
#1642 [PR #779] [CLOSED] docs(README): update contributors
Opened
#1643 [PR #782] [CLOSED] docs(README): update contributors
Opened
#1644 [PR #783] [CLOSED] docs(README): update contributors
Opened
#1645 [PR #784] [MERGED] Fix linting broken after Go 1.19
Opened
#1646 [PR #785] [CLOSED] docs(README): update contributors
Opened
#1647 [PR #786] [MERGED] Update dependencies 20220904
Opened
#1648 [PR #787] [CLOSED] docs(README): update contributors
Opened
#1649 [PR #788] [MERGED] Warn when Headscale is running behind an improperly configured proxy
Opened
#1650 [PR #790] [MERGED] Add reverse proxy documentation
Opened
#1651 [PR #789] [CLOSED] docs(README): update contributors
Opened
#1652 [PR #791] [MERGED] Add logo files and add to readme
Opened
#1653 [PR #793] [MERGED] Remove sponsor buttons
Opened
#1654 [PR #792] [CLOSED] docs(README): update contributors
Opened
#1655 [PR #797] [MERGED] Remove --rm flag from Docker example
Opened
#1656 [PR #796] [CLOSED] docs(README): update contributors
Opened
#1657 [PR #795] [MERGED] Run buf mod update in protos/
Opened
#1658 [PR #801] [MERGED] Add integration tests for OIDC authentication
Opened
#1659 [PR #798] [CLOSED] docs(README): update contributors
Opened
#1660 [PR #802] [CLOSED] Mysql support
Opened
#1661 [PR #812] [CLOSED] docs(README): update contributors
Opened
#1662 [PR #811] [MERGED] Fix subnet routers
Opened
#1663 [PR #815] [MERGED] Removed gin from go.sum (Github security notice)
Opened
#1664 [PR #816] [CLOSED] docs(README): update contributors
Opened
#1665 [PR #818] [CLOSED] docs(README): update contributors
Opened
#1666 [PR #819] [CLOSED] docs(README): update contributors
Opened
#1667 [PR #820] [CLOSED] docs(README): update contributors
Opened
#1668 [PR #823] [MERGED] Protect against user injection for registration CLI page
Opened
#1669 [PR #821] [CLOSED] docs(README): update contributors
Opened
#1670 [PR #824] [CLOSED] docs(README): update contributors
Opened
#1671 [PR #825] [CLOSED] docs(README): update contributors
Opened
#1672 [PR #829] [MERGED] Add option to allow headscale to start if OIDC fails to initialise
Opened
#1673 [PR #831] [MERGED] Move lets enc listener into go routine
Opened
#1674 [PR #830] [MERGED] Nix update and format flake file
Opened
#1675 [PR #833] [CLOSED] docs(README): update contributors
Opened
#1676 [PR #832] [CLOSED] docs(README): update contributors
Opened
#1677 [PR #837] [MERGED] Fix warning on OIDC initialisation success
Opened
#1678 [PR #834] [CLOSED] docs(README): update contributors
Opened
#1679 [PR #840] [MERGED] docs(README): update contributors
Opened
#1680 [PR #843] [MERGED] Fix spelling error
Opened
#1681 [PR #844] [MERGED] Run integration tests inside docker, dont depend on local platform
Opened
#1682 [PR #847] [MERGED] Add SSH ACL support
Opened
#1683 [PR #849] [CLOSED] Further sanitization changes
Opened
#1684 [PR #852] [MERGED] Update document about reverse-proxy
Opened
#1685 [PR #853] [MERGED] Fix the proposed noise private_key_path
Opened
#1686 [PR #854] [MERGED] Split integration tests into seperate jobs
Opened
#1687 [PR #855] [MERGED] Fix no arguments panic
Opened
#1688 [PR #856] [MERGED] Integration tests v2
Opened
#1689 [PR #857] [CLOSED] docs(README): update contributors
Opened
#1690 [PR #858] [CLOSED] docs(README): update contributors
Opened
#1691 [PR #859] [MERGED] Add back head and unstable, ts 1.32.0
Opened
#1692 [PR #860] [CLOSED] docs(README): update contributors
Opened
#1693 [PR #863] [MERGED] Provide LoginName when registering with pre-auth key
Opened
#1694 [PR #862] [MERGED] Fix prefix length comparison bug in AutoApprovers route evaluation
Opened
#1695 [PR #865] [MERGED] Do not use build tags for running integration tests
Opened
#1696 [PR #866] [CLOSED] docs(README): update contributors
Opened
#1697 [PR #868] [CLOSED] docs(README): update contributors
Opened
#1698 [PR #870] [CLOSED] docs(README): update contributors
Opened
#1699 [PR #869] [CLOSED] docs(README): update contributors
Opened
#1700 [PR #873] [CLOSED] docs(README): update contributors
Opened
#1701 [PR #871] [MERGED] Integration: make TailscaleClient interface
Opened
#1702 [PR #874] [MERGED] Fix issue 660
Opened
#1703 [PR #875] [MERGED] Unify code snippet comment location
Opened
#1704 [PR #877] [CLOSED] docs(README): update contributors
Opened
#1705 [PR #884] [MERGED] Integration test v2, hostname ping test
Opened
#1706 [PR #887] [MERGED] Migrate taildrop test to v2
Opened
#1707 [PR #880] [CLOSED] Add logging to file
Opened
#1708 [PR #881] [CLOSED] docs(README): update contributors
Opened
#1709 [PR #886] [CLOSED] docs(README): update contributors
Opened
#1710 [PR #889] [MERGED] Integration v2: port resolve magicdns
Opened
#1711 [PR #890] [MERGED] Integration v2: initial CLI command work
Opened
#1712 [PR #888] [MERGED] docs(README): update contributors
Opened
#1713 [PR #891] [MERGED] Integration, remove retry
Opened
#1714 [PR #892] [MERGED] Remove verbose flag for v2 tests, increase timeout
Opened
#1715 [PR #895] [MERGED] Simplify code around latest state change map updates
Opened
#1716 [PR #893] [CLOSED] docs(README): update contributors
Opened
#1717 [PR #897] [MERGED] Remove v1 general integration tests
Opened
#1718 [PR #896] [MERGED] Update golines
Opened
#1719 [PR #898] [CLOSED] docs(README): update contributors
Opened
#1720 [PR #899] [MERGED] Remove ip_prefix, its been deprecated for a long time
Opened
#1721 [PR #900] [MERGED] Update dependencies
Opened
#1722 [PR #901] [CLOSED] docs(README): update contributors
Opened
#1723 [PR #902] [CLOSED] docs(README): update contributors
Opened
#1724 [PR #903] [CLOSED] docs(README): update contributors
Opened
#1725 [PR #904] [CLOSED] docs(README): update contributors
Opened
#1726 [PR #905] [MERGED] Add support for "override local DNS"
Opened
#1727 [PR #906] [MERGED] Give user better feedback if headscale socket is unwritable
Opened
#1728 [PR #907] [CLOSED] docs(README): update contributors
Opened
#1729 [PR #908] [CLOSED] docs(README): update contributors
Opened
#1730 [PR #909] [CLOSED] docs(README): update contributors
Opened
#1731 [PR #910] [CLOSED] docs(README): update contributors
Opened
#1732 [PR #911] [CLOSED] Registration bug
Opened
#1733 [PR #913] [MERGED] integration: add headscale configuration programatically
Opened
#1734 [PR #914] [MERGED] fix bug in #912
Opened
#1735 [PR #915] [MERGED] feat: add information to the /apple page for the macOS standalone client user
Opened
#1736 [PR #918] [CLOSED] NodePublicKeyRegex fix for Windows
Opened
#1737 [PR #920] [MERGED] Give workflows better names
Opened
#1738 [PR #922] [CLOSED] docs(README): update contributors
Opened
#1739 [PR #921] [MERGED] Run more tests in parallel
Opened
#1740 [PR #924] [CLOSED] docs(README): update contributors
Opened
#1741 [PR #923] [CLOSED] docs(README): update contributors
Opened
#1742 [PR #926] [MERGED] Use kradalby/selfhosted runner for integration tests v2
Opened
#1743 [PR #927] [MERGED] Make more sslmode available for postgresql connection (Fixes #925)
Opened
#1744 [PR #928] [MERGED] Add build flag to enable TS2019
Opened
#1745 [PR #929] [CLOSED] Add auth web flow integration tests
Opened
#1746 [PR #930] [CLOSED] docs(README): update contributors
Opened
#1747 [PR #931] [MERGED] Fix bitrotted versions in gh ci
Opened
#1748 [PR #932] [CLOSED] docs(README): update contributors
Opened
#1749 [PR #933] [CLOSED] docs(README): update contributors
Opened
#1750 [PR #934] [CLOSED] docs(README): update contributors
Opened
#1751 [PR #940] [MERGED] Add support for NextDNS resolver
Opened
#1752 [PR #937] [CLOSED] Integration tests: Port DERP, add TLS ability.
Opened
#1753 [PR #942] [CLOSED] Add host info to machine
Opened
#1754 [PR #936] [MERGED] docs(README): update contributors
Opened
#1755 [PR #943] [MERGED] Remove private key constant errors from NewHeadscale
Opened
#1756 [PR #944] [MERGED] Make TLS setup work automatically
Opened
#1757 [PR #946] [MERGED] Fix noise mapResponse updates, Fixes #838
Opened
#1758 [PR #945] [MERGED] config-example.yaml: fix typos and improve english.
Opened
#1759 [PR #947] [CLOSED] docs(README): update contributors
Opened
#1760 [PR #948] [CLOSED] docs(README): update contributors
Opened
#1761 [PR #949] [CLOSED] docs(README): update contributors
Opened
#1762 [PR #951] [MERGED] Fixed minor linting issues
Opened
#1763 [PR #953] [MERGED] Add WaitForReady in TSIC
Opened
#1764 [PR #952] [CLOSED] docs(README): update contributors
Opened
#1765 [PR #954] [CLOSED] docs(README): update contributors
Opened
#1766 [PR #955] [MERGED] Extend TSIC integration interface for non-authkey logins
Opened
#1767 [PR #956] [CLOSED] docs(README): update contributors
Opened
#1768 [PR #957] [MERGED] Add Web auth integration tests (v2)
Opened
#1769 [PR #958] [CLOSED] docs(README): update contributors
Opened
#1770 [PR #959] [MERGED] Releases: use flavor to set the tag suffix
Opened
#1771 [PR #960] [MERGED] OIDC code cleanup and harmonize with regular web auth
Opened
#1772 [PR #961] [CLOSED] docs(README): update contributors
Opened
#1773 [PR #962] [MERGED] Remove Alpine Linux container
Opened
#1774 [PR #963] [CLOSED] docs(README): update contributors
Opened
#1775 [PR #964] [MERGED] Move Tailscale old versions to TS2019 list
Opened
#1776 [PR #966] [CLOSED] docs(README): update contributors
Opened
#1777 [PR #969] [CLOSED] docs(README): update contributors
Opened
#1778 [PR #967] [CLOSED] Add enumeration missing in the ACL rule filter
Opened
#1779 [PR #970] [CLOSED] docs(README): update contributors
Opened
#1780 [PR #971] [MERGED] Fix AuthURL on machine expiration when using OIDC
Opened
#1781 [PR #972] [MERGED] Correction in the sample config file
Opened
#1782 [PR #973] [CLOSED] docs(README): update contributors
Opened
#1783 [PR #974] [CLOSED] Bump meta action and always include latest
Opened
#1784 [PR #975] [MERGED] Make config example "local dev first"
Opened
#1785 [PR #976] [CLOSED] docs(README): update contributors
Opened
#1786 [PR #977] [MERGED] Release: tag every release with develop
Opened
#1787 [PR #978] [CLOSED] docs(README): update contributors
Opened
#1788 [PR #979] [MERGED] OIDC integration v2
Opened
#1789 [PR #980] [CLOSED] docs(README): update contributors
Opened
#1790 [PR #981] [MERGED] Fix remote CLI when there is no config file present
Opened
#1791 [PR #982] [CLOSED] docs(README): update contributors
Opened
#1792 [PR #983] [CLOSED] Add Random IP Assignment
Opened
#1793 [PR #984] [MERGED] Remove mTLS code
Opened
#1794 [PR #985] [MERGED] WaitForReady in web auth flow integration tests outside up goroutine
Opened
#1795 [PR #986] [CLOSED] docs(README): update contributors
Opened
#1796 [PR #987] [CLOSED] docs(README): update contributors
Opened
#1797 [PR #989] [MERGED] Increase integration tests timeout to 120m
Opened
#1798 [PR #990] [MERGED] Fix shell completion issues
Opened
#1799 [PR #988] [MERGED] Proposal: Better routing management
Opened
#1800 [PR #995] [MERGED] Remove broken renovatebot
Opened
#1801 [PR #992] [CLOSED] docs(README): update contributors
Opened
#1802 [PR #991] [CLOSED] docs(README): update contributors
Opened
#1803 [PR #996] [CLOSED] docs(README): update contributors
Opened
#1804 [PR #997] [CLOSED] docs(README): update contributors
Opened
#1805 [PR #999] [CLOSED] docs(README): update contributors
Opened
#1806 [PR #998] [MERGED] Remove some very verbose error outputs
Opened
#1807 [PR #1001] [CLOSED] docs(README): update contributors
Opened
#1808 [PR #1002] [CLOSED] docs(README): update contributors
Opened
#1809 [PR #1003] [MERGED] Remove old OIDC integration tests
Opened
#1810 [PR #1005] [MERGED] Mark all new integration tests to run in parallel
Opened
#1811 [PR #1004] [CLOSED] docs(README): update contributors
Opened
#1812 [PR #1006] [CLOSED] docs(README): update contributors
Opened
#1813 [PR #1008] [MERGED] Make displayName include basedomain if set
Opened
#1814 [PR #1009] [CLOSED] docs(README): update contributors
Opened
#1815 [PR #1013] [MERGED] docs(README): update contributors
Opened
#1816 [PR #1015] [CLOSED] docs(README): update contributors
Opened
#1817 [PR #1016] [MERGED] Update platform doc with Fast User Switching
Opened
#1818 [PR #1018] [CLOSED] docs(README): update contributors
Opened
#1819 [PR #1017] [CLOSED] Refactor subnet router code and add support for subnet failover (HA)
Opened
#1820 [PR #1020] [CLOSED] docs(README): update contributors
Opened
#1821 [PR #1019] [MERGED] Mark some changes as more important
Opened
#1822 [PR #1022] [CLOSED] Fix linting issues warning incorrect t.Parallel() calls in tests
Opened
#1823 [PR #1023] [CLOSED] Add nolint for t.parallel
Opened
#1824 [PR #1024] [MERGED] Refactor routing code and add support for subnet failover (HA)
Opened
#1825 [PR #1028] [MERGED] Correct typo on macOS standalone profile link
Opened
#1826 [PR #1031] [MERGED] Add breaking change about noise private path
Opened
#1827 [PR #1032] [CLOSED] docs(README): update contributors
Opened
#1828 [PR #1030] [MERGED] Ignore tparallel where it doesnt make sense
Opened
#1829 [PR #1033] [CLOSED] docs(README): update contributors
Opened
#1830 [PR #1034] [CLOSED] docs(README): update contributors
Opened
#1831 [PR #1035] [MERGED] add the possibility for custom DNS records
Opened
#1832 [PR #1036] [MERGED] Make core ACL generation function not a Headscale method
Opened
#1833 [PR #1038] [MERGED] Added changelog for 0.17.1
Opened
#1834 [PR #1037] [CLOSED] docs(README): update contributors
Opened
#1835 [PR #1039] [CLOSED] docs(README): update contributors
Opened
#1836 [PR #1041] [MERGED] Added an OIDC AllowGroups option for authorization.
Opened
#1837 [PR #1044] [CLOSED] docs(README): update contributors
Opened
#1838 [PR #1046] [MERGED] Do not explicitly set the protocols when omitted in ACL
Opened
#1839 [PR #1042] [MERGED] Upgrade dependencies and streamline version use
Opened
#1840 [PR #1047] [CLOSED] docs(README): update contributors
Opened
#1841 [PR #1048] [MERGED] docs(README): update contributors
Opened
#1842 [PR #1049] [MERGED] Murder docker container and network before run
Opened
#1843 [PR #1051] [CLOSED] docs(README): update contributors
Opened
#1844 [PR #1052] [MERGED] Set db_ssl to false by default, fixes #1043
Opened
#1845 [PR #1053] docs(README): update contributors
Opened
#1846 [PR #1057] [MERGED] Disable Tailscale 1.16 in integration tests
Opened
#1847 [PR #1058] [MERGED] Fix duplicate nodes due to incorrect implementation of the protocol
Opened
#1848 [PR #1062] [MERGED] Report if a machine is online in CLI more accurately
Opened
#1849 [PR #1061] [CLOSED] Added info about custom URL feature break.
Opened
#1850 [PR #1064] [MERGED] dont fail docker if nothing to delete
Opened
#1851 [PR #1065] [MERGED] upgrade grpc-gateway plugin
Opened
#1852 [PR #1067] [MERGED] OIDC: Expire machines/nodes after token expiry
Opened
#1853 [PR #1066] [CLOSED] Remove outdated windows client doc
Opened
#1854 [PR #1068] [CLOSED] Add test to reproduce #1050
Opened
#1855 [PR #1069] [CLOSED] ACL testing playground
Opened
#1856 [PR #1071] [MERGED] Show clients offline when expired
Opened
#1857 [PR #1070] [MERGED] Update remote-cli.md
Opened
#1858 [PR #1074] [CLOSED] docs(README): update contributors
Opened
#1859 [PR #1076] [MERGED] fix(routes): ensure routes are correctly propagated
Opened
#1860 [PR #1077] [CLOSED] docs(README): update contributors
Opened
#1861 [PR #1078] [MERGED] Minor linting fixes
Opened
#1862 [PR #1079] [CLOSED] docs(README): update contributors
Opened
#1863 [PR #1080] [CLOSED] Machinekey in noise rebase
Opened
#1864 [PR #1081] [CLOSED] docs(README): update contributors
Opened
#1865 [PR #1082] [MERGED] Add logout method to Tailscale interface
Opened
#1866 [PR #1086] [MERGED] update macos check template
Opened
#1867 [PR #1083] [CLOSED] docs(README): update contributors
Opened
#1868 [PR #1089] [MERGED] Add ko-fi sponsor button
Opened
#1869 [PR #1088] [MERGED] Add integration tests for logout and login using auth keys
Opened
#1870 [PR #1091] [CLOSED] docs(README): update contributors
Opened
#1871 [PR #1093] [MERGED] fix goroutine leak
Opened
#1872 [PR #1094] [CLOSED] docs(README): update contributors
Opened
#1873 [PR #1090] [CLOSED] docs(README): update contributors
Opened
#1874 [PR #1095] [CLOSED] docs(README): update contributors
Opened
#1875 [PR #1096] [MERGED] templates: fix typo "custm" -> "custom"
Opened
#1876 [PR #1098] [MERGED] Remove ephemeral on logout
Opened
#1877 [PR #1097] [CLOSED] docs(README): update contributors
Opened
#1878 [PR #1102] [MERGED] Add Caddy instructions to reverse_proxy.md
Opened
#1879 [PR #1101] [MERGED] domains/restricted_nameservers: check dnsConfig.Resolvers instead
Opened
#1880 [PR #1103] [CLOSED] docs(README): update contributors
Opened
#1881 [PR #1105] [CLOSED] docs(README): update contributors
Opened
#1882 [PR #1106] [CLOSED] docs(README): update contributors
Opened
#1883 [PR #1107] [MERGED] use smallzstd and sync pool
Opened
#1884 [PR #1104] [MERGED] Fix exit nodes funcionality
Opened
#1885 [PR #1108] [MERGED] Remove Tailscale v1.18.2 from test matrix
Opened
#1886 [PR #1109] [CLOSED] docs(README): update contributors
Opened
#1887 [PR #1110] [MERGED] Fix excessive cpu usage
Opened
#1888 [PR #1113] [CLOSED] docs(README): update contributors
Opened
#1889 [PR #1111] [CLOSED] docs(README): update contributors
Opened
#1890 [PR #1117] [MERGED] Read integration test config from Env
Opened
#1891 [PR #1115] [CLOSED] docs(README): update contributors
Opened
#1892 [PR #1116] [CLOSED] Repeat ToStringSlice
Opened
#1893 [PR #1118] [CLOSED] docs(README): update contributors
Opened
#1894 [PR #1119] [MERGED] Split integration tests in separate gh actions workflows
Opened
#1895 [PR #1120] [CLOSED] docs(README): update contributors
Opened
#1896 [PR #1122] [MERGED] Limit run regex for generated workflows
Opened
#1897 [PR #1123] [CLOSED] docs(README): update contributors
Opened
#1898 [PR #1124] [CLOSED] docs(README): update contributors
Opened
#1899 [PR #1127] [MERGED] oidc: allow reading the client secret from a file
Opened
#1900 [PR #1129] [MERGED] Repeat ToStringSlice
Opened
#1901 [PR #1128] [MERGED] Fix SIGSEGV crash related to map of state changes
Opened
#1902 [PR #1130] [CLOSED] docs(README): update contributors
Opened
#1903 [PR #1131] [MERGED] Added entry for performance improvements in ACLs
Opened
#1904 [PR #1132] [CLOSED] docs(README): update contributors
Opened
#1905 [PR #1133] [MERGED] Refresh machines with correct new expiry
Opened
#1906 [PR #1135] [MERGED] update ip_prefixes docs
Opened
#1907 [PR #1136] [CLOSED] docs(README): update contributors
Opened
#1908 [PR #1138] [MERGED] Makefile: remove a missing target
Opened
#1909 [PR #1137] [CLOSED] docs(README): update contributors
Opened
#1910 [PR #1140] [CLOSED] docs(README): update contributors
Opened
#1911 [PR #1139] [CLOSED] docs(README): update contributors
Opened
#1912 [PR #1146] [CLOSED] docs(README): update contributors
Opened
#1913 [PR #1145] [CLOSED] gorm: put Where before Find
Opened
#1914 [PR #1144] [MERGED] Rename [Nn]amespace -> [Uu]ser
Opened
#1915 [PR #1148] [MERGED] gorm: put Where before Find
Opened
#1916 [PR #1147] [MERGED] Migrate DB: rename table is plural
Opened
#1917 [PR #1149] [CLOSED] docs(README): update contributors
Opened
#1918 [PR #1151] [MERGED] permalink in the limitations section to tailscale
Opened
#1919 [PR #1150] [MERGED] Update the node join instruction to reference "username"
Opened
#1920 [PR #1152] [CLOSED] docs(README): update contributors
Opened
#1921 [PR #1154] [CLOSED] docs(README): update contributors
Opened
#1922 [PR #1156] [CLOSED] docs(README): update contributors
Opened
#1923 [PR #1160] [CLOSED] Add note on Apache as unsupported reverse proxy
Opened
#1924 [PR #1159] [MERGED] Enable both exit routes at the same time
Opened
#1925 [PR #1162] [MERGED] Align behaviour of dns_config.restricted_nameservers to tailscale
Opened
#1926 [PR #1163] [MERGED] modify the test to reflect the changes on the webinterface
Opened
#1927 [PR #1165] [CLOSED] docs(README): update contributors
Opened
#1928 [PR #1164] [MERGED] Add hint for reverse proxying with Apache
Opened
#1929 [PR #1167] [MERGED] Target Tailscale 1.36.0
Opened
#1930 [PR #1168] [CLOSED] docs(README): update contributors
Opened
#1931 [PR #1169] [CLOSED] docs(README): update contributors
Opened
#1932 [PR #1170] [MERGED] Mark -n and --namespace as deprecated
Opened
#1933 [PR #1172] [CLOSED] docs(README): update contributors
Opened
#1934 [PR #1171] [MERGED] Migrate namespace_id to user_id column in machine and pak
Opened
#1935 [PR #1173] [CLOSED] docs(README): update contributors
Opened
#1936 [PR #1175] [CLOSED] docs(README): update contributors
Opened
#1937 [PR #1178] [CLOSED] docs(README): update contributors
Opened
#1938 [PR #1177] [MERGED] Updated changelog for v0.20.0
Opened
#1939 [PR #1179] [CLOSED] docs(README): update contributors
Opened
#1940 [PR #1180] [CLOSED] Do not show IsPrimary field as false in exit nodes
Opened
#1941 [PR #1181] [MERGED] Do not show IsPrimary field as false in exit nodes
Opened
#1942 [PR #1182] [CLOSED] docs(README): update contributors
Opened
#1943 [PR #1183] [MERGED] Cancel old builds if new commits appear
Opened
#1944 [PR #1184] [MERGED] Improve generated integration tests
Opened
#1945 [PR #1185] [MERGED] Rename IP specific function, add missing Host field test case
Opened
#1946 [PR #1187] [CLOSED] docs(README): update contributors
Opened
#1947 [PR #1186] [CLOSED] docs(README): update contributors
Opened
#1948 [PR #1188] [CLOSED] docs(README): update contributors
Opened
#1949 [PR #1190] [CLOSED] docs(README): update contributors
Opened
#1950 [PR #1191] [MERGED] Set OpenID Connect Expiry
Opened
#1951 [PR #1193] [CLOSED] docs(README): update contributors
Opened
#1952 [PR #1192] [MERGED] Use ripgrep to find list of integration tests
Opened
#1953 [PR #1194] [CLOSED] docs(README): update contributors
Opened
#1954 [PR #1195] [MERGED] Various tailcfg type fixes, expiry hardening and integration test
Opened
#1955 [PR #1196] [MERGED] Remove all tests before generating new ones
Opened
#1956 [PR #1197] [CLOSED] docs(README): update contributors
Opened
#1957 [PR #1198] [CLOSED] docs(README): update contributors
Opened
#1958 [PR #1199] [MERGED] Improve integration tests docs and godocs
Opened
#1959 [PR #1200] [CLOSED] docs(README): update contributors
Opened
#1960 [PR #1208] [CLOSED] docs(README): update contributors
Opened
#1961 [PR #1201] [MERGED] Return 404 on unmatched routes
Opened
#1962 [PR #1207] [MERGED] Add list of talks to the readme
Opened
#1963 [PR #1210] [MERGED] Update running-headscale-linux.md
Opened
#1964 [PR #1211] [MERGED] Add css to the /windows and /apple templates
Opened
#1965 [PR #1212] [CLOSED] docs(README): update contributors
Opened
#1966 [PR #1213] [CLOSED] docs(README): update contributors
Opened
#1967 [PR #1220] [CLOSED] Bump golang.org/x/net from 0.2.0 to 0.7.0
Opened
#1968 [PR #1218] [MERGED] Fix OpenBSD build docs
Opened
#1969 [PR #1221] [CLOSED] Improve docs
Opened
#1970 [PR #1226] [MERGED] Add Graphical Control Panels section to README
Opened
#1971 [PR #1224] [MERGED] github.com/gofrs/uuid/v5 is now go modules compatible, use it
Opened
#1972 [PR #1223] [MERGED] Add steps for Google OAuth for OIDC
Opened
#1973 [PR #1231] [CLOSED] docs(README): update contributors
Opened
#1974 [PR #1230] [MERGED] Add "configtest" CLI command.
Opened
#1975 [PR #1232] [MERGED] Update dependencies 20230226
Opened
#1976 [PR #1234] [CLOSED] docs(README): update contributors
Opened
#1977 [PR #1233] [MERGED] Update prettier action
Opened
#1978 [PR #1236] [MERGED] Target Tailscale 1.36
Opened
#1979 [PR #1235] [CLOSED] docs(README): update contributors
Opened
#1980 [PR #1237] [CLOSED] docs(README): update contributors
Opened
#1981 [PR #1239] [CLOSED] Optimize getFilteredByACLPeers
Opened
#1982 [PR #1238] [CLOSED] docs(README): update contributors
Opened
#1983 [PR #1241] [MERGED] Post PR comment when nix vendor sum breaks
Opened
#1984 [PR #1243] [CLOSED] docs(README): update contributors
Opened
#1985 [PR #1245] [MERGED] Fix various linting issues + golang-lint upgrade
Opened
#1986 [PR #1244] [MERGED] Allow to delete routes
Opened
#1987 [PR #1247] [CLOSED] docs(README): update contributors
Opened
#1988 [PR #1246] [MERGED] changelog: prep for 0.21
Opened
#1989 [PR #1248] [CLOSED] docs(README): update contributors
Opened
#1990 [PR #1249] [CLOSED] docs(README): update contributors
Opened
#1991 [PR #1250] [CLOSED] docs(README): update contributors
Opened
#1992 [PR #1251] [CLOSED] docs(README): update contributors
Opened
#1993 [PR #1252] [CLOSED] docs(README): update contributors
Opened
#1994 [PR #1253] [CLOSED] docs(README): update contributors
Opened
#1995 [PR #1254] [MERGED] MapResponse optimalisations, peer list integration tests
Opened
#1996 [PR #1255] [CLOSED] docs(README): update contributors
Opened
#1997 [PR #1261] [MERGED] Add instructions on how to login to iOS
Opened
#1998 [PR #1256] [MERGED] adding some sleep on re-registration after machine expired
Opened
#1999 [PR #1258] [MERGED] Add ACL test for limiting a single port.
Opened
#2000 [PR #1262] [MERGED] docs(README): update contributors
Opened
#2001 [PR #1263] [MERGED] document running exit nodes
Opened
#2002 [PR #1265] [CLOSED] chore(README): Announce that iOS is now supported
Opened
#2003 [PR #1264] [MERGED] Update iOS compatibility and added iOS docs
Opened
#2004 [PR #1266] [CLOSED] docs(README): update contributors
Opened
#2005 [PR #1267] [CLOSED] docs(README): update contributors
Opened
#2006 [PR #1269] [CLOSED] docs(README): update contributors
Opened
#2007 [PR #1268] [CLOSED] Added headscale-ui to list of control panels
Opened
#2008 [PR #1270] [CLOSED] docs(README): update contributors
Opened
#2009 [PR #1272] [MERGED] Add missing entry to changelog
Opened
#2010 [PR #1273] [CLOSED] docs(README): update contributors
Opened
#2011 [PR #1278] [MERGED] updated to ACL doc
Opened
#2012 [PR #1279] [MERGED] Fix issue where ACL * would filter out returning connections
Opened
#2013 [PR #1280] [CLOSED] Bump tailscale.com from 1.36.2 to 1.38.2
Opened
#2014 [PR #1281] [MERGED] Do not use yaml.v2 and yaml.v3 as direct dependency
Opened
#2015 [PR #1286] [MERGED] Add SVG logos
Opened
#2016 [PR #1287] [CLOSED] Allow use of the preferred_username OIDC claim.
Opened
#2017 [PR #1289] [CLOSED] docs(README): update contributors
Opened
#2018 [PR #1288] [MERGED] ACL Doc's
Opened
#2019 [PR #1290] [CLOSED] docs(README): update contributors
Opened
#2020 [PR #1291] [CLOSED] docs(README): update contributors
Opened
#2021 [PR #1293] [MERGED] Build static site with documentation
Opened
#2022 [PR #1297] [MERGED] Set up nFPM to build .deb and .rpm
Opened
#2023 [PR #1298] [CLOSED] Bump github.com/opencontainers/runc from 1.1.4 to 1.1.5
Opened
#2024 [PR #1296] [CLOSED] docs(README): update contributors
Opened
#2025 [PR #1299] [MERGED] Adding Powershell commands to Windows instructions
Opened
#2026 [PR #1304] [MERGED] Add tests to verify "Hosts" aliases in ACL
Opened
#2027 [PR #1311] [CLOSED] Bump to Go 1.20 and Tailscale 1.38
Opened
#2028 [PR #1308] [CLOSED] docs(README): update contributors
Opened
#2029 [PR #1314] [CLOSED] docs(README): update contributors
Opened
#2030 [PR #1315] [MERGED] Remove deprecated/broken linters
Opened
#2031 [PR #1316] [CLOSED] docs(README): update contributors
Opened
#2032 [PR #1317] [MERGED] Fix CIDR calculation in expandACLPeerAddr
Opened
#2033 [PR #1321] [CLOSED] docs(README): update contributors
Opened
#2034 [PR #1318] [CLOSED] docs(README): update contributors
Opened
#2035 [PR #1322] [CLOSED] Bump github.com/docker/docker from 23.0.1+incompatible to 23.0.3+incompatible
Opened
#2036 [PR #1323] [MERGED] Target Go 1.20 and Tailscale 1.38
Opened
#2037 [PR #1324] [CLOSED] docs(README): update contributors
Opened
#2038 [PR #1325] [MERGED] docs(README): update contributors
Opened
#2039 [PR #1327] [CLOSED] docs(README): update contributors
Opened
#2040 [PR #1328] [MERGED] Added 1.38.4 in the new tests
Opened
#2041 [PR #1329] [CLOSED] docs(README): update contributors
Opened
#2042 [PR #1330] [MERGED] Fix binary releases
Opened
#2043 [PR #1332] [CLOSED] docs(README): update contributors
Opened
#2044 [PR #1333] [CLOSED] Add unix_socket directive to the "likely wanted changes" area
Opened
#2045 [PR #1335] [MERGED] Make sure all clients of a user are ready
Opened
#2046 [PR #1336] [CLOSED] docs(README): update contributors
Opened
#2047 [PR #1338] [MERGED] Port embedded DERP integration tests to new model
Opened
#2048 [PR #1339] [MERGED] Fix IPv6 in ACLs
Opened
#2049 [PR #1343] [CLOSED] docs(README): update contributors
Opened
#2050 [PR #1346] [MERGED] Update flakes, add some quality of life improvements
Opened
#2051 [PR #1348] [CLOSED] refactor: Support any PostgreSQL database
Opened
#2052 [PR #1349] [MERGED] Packaging and doc fixups
Opened
#2053 [PR #1351] [CLOSED] docs(README): update contributors
Opened
#2054 [PR #1350] [MERGED] update changelog for #1339
Opened
#2055 [PR #1352] [MERGED] set release date in changelog
Opened
#2056 [PR #1353] [CLOSED] docs(README): update contributors
Opened
#2057 [PR #1354] [CLOSED] docs(README): update contributors
Opened
#2058 [PR #1355] [MERGED] release source code with vendored dependencies
Opened
#2059 [PR #1357] [CLOSED] docs(README): update contributors
Opened
#2060 [PR #1360] [MERGED] fix issue where binaries are not released
Opened
#2061 [PR #1358] [CLOSED] docs(README): update contributors
Opened
#2062 [PR #1361] [CLOSED] docs(README): update contributors
Opened
#2063 [PR #1362] [MERGED] Add version to binary release
Opened
#2064 [PR #1363] [CLOSED] docs(README): update contributors
Opened
#2065 [PR #1365] [MERGED] Add more capabilities for systemd
Opened
#2066 [PR #1373] [CLOSED] docs(README): update contributors
Opened
#2067 [PR #1366] [CLOSED] docs(README): update contributors
Opened
#2068 [PR #1374] [MERGED] Remove legacy DERP tests
Opened
#2069 [PR #1375] [CLOSED] docs(README): update contributors
Opened
#2070 [PR #1376] [MERGED] update flake hash
Opened
#2071 [PR #1377] [MERGED] optimize generateACLPeerCacheMap
Opened
#2072 [PR #1378] [CLOSED] docs(README): update contributors
Opened
#2073 [PR #1379] [MERGED] Improvements on Noise implementation
Opened
#2074 [PR #1380] [CLOSED] docs(README): update contributors
Opened
#2075 [PR #1381] [MERGED] ACL refactor
Opened
#2076 [PR #1382] [MERGED] Add go profiling flag, and enable on integration tests
Opened
#2077 [PR #1385] [CLOSED] docs(README): update contributors
Opened
#2078 [PR #1390] [CLOSED] Send peer deltas in MapResponse
Opened
#2079 [PR #1387] [CLOSED] Switch docker release to goreleaser
Opened
#2080 [PR #1391] [MERGED] Move systemd service file to standard location
Opened
#2081 [PR #1394] [CLOSED] docs(README): update contributors
Opened
#2082 [PR #1395] [CLOSED] Fix: unable to start without bind mount
Opened
#2083 [PR #1396] [CLOSED] initial ssh reject work
Opened
#2084 [PR #1397] [MERGED] Fix : Updating the doc path
Opened
#2085 [PR #1398] [MERGED] Fix : Change master branch to main
Opened
#2086 [PR #1399] [CLOSED] docs(README): update contributors
Opened
#2087 [PR #1400] [CLOSED] PR: Add a config to verify clients on DERP
Opened
#2088 [PR #1403] [MERGED] trim dockerfiles, script to rebuild test images
Opened
#2089 [PR #1401] [CLOSED] docs(README): update contributors
Opened
#2090 [PR #1405] [CLOSED] feat: remove user if machine is tagged
Opened
#2091 [PR #1406] [CLOSED] Update the docker container doc
Opened
#2092 [PR #1408] [CLOSED] docs(README): update contributors
Opened
#2093 [PR #1404] [CLOSED] [In Queue] Rename Machine to Node
Opened
#2094 [PR #1410] [CLOSED] docs(README): update contributors
Opened
#2095 [PR #1412] [MERGED] Add missing GH releases page link
Opened
#2096 [PR #1414] [MERGED] Revert unix_socket to default value
Opened
#2097 [PR #1415] [CLOSED] docs(README): update contributors
Opened
#2098 [PR #1416] [CLOSED] docs(README): update contributors
Opened
#2099 [PR #1417] [MERGED] Revert and fix Unix socket location
Opened
#2100 [PR #1419] [CLOSED] docs(README): update contributors
Opened
#2101 [PR #1420] [MERGED] [docs] Use modern apt command to install package
Opened
#2102 [PR #1421] [MERGED] Update docker related doc
Opened
#2103 [PR #1422] [CLOSED] Support hosting headscale with an HTTP path prefix
Opened
#2104 [PR #1424] [CLOSED] Update embeded derp host to requested host
Opened
#2105 [PR #1425] [MERGED] Give a warning when users have set an unsupported prefix
Opened
#2106 [PR #1426] [MERGED] Add IP forwarding requirement to documentation
Opened
#2107 [PR #1427] [CLOSED] docs(README): update contributors
Opened
#2108 [PR #1428] [MERGED] Disable and Delete route must affect both exit routes (IPv4 and IPv6)
Opened
#2109 [PR #1429] [MERGED] Add further clarification on unsupported ranges in config example
Opened
#2110 [PR #1430] [CLOSED] docs(README): update contributors
Opened
#2111 [PR #1431] [CLOSED] docs(README): update contributors
Opened
#2112 [PR #1435] [CLOSED] feat: move OIDC callback page template to config
Opened
#2113 [PR #1437] [MERGED] update readme and templates to clarify scope
Opened
#2114 [PR #1434] [CLOSED] docs(README): update contributors
Opened
#2115 [PR #1438] [CLOSED] docs(README): update contributors
Opened
#2116 [PR #1439] [MERGED] Improved website
Opened
#2117 [PR #1440] [CLOSED] docs(README): update contributors
Opened
#2118 [PR #1441] [CLOSED] Missed the FAQ file
Opened
#2119 [PR #1442] [MERGED] Added missing file
Opened
#2120 [PR #1443] [CLOSED] docs(README): update contributors
Opened
#2121 [PR #1444] [MERGED] Code reorg step 1
Opened
#2122 [PR #1446] [MERGED] Fix IP Address Order Bug
Opened
#2123 [PR #1445] [CLOSED] Change IP Address Order: IPv4 First
Opened
#2124 [PR #1447] [CLOSED] docs(README): update contributors
Opened
#2125 [PR #1450] [MERGED] Docker image improvements
Opened
#2126 [PR #1448] [MERGED] Added web ui section
Opened
#2127 [PR #1452] [CLOSED] docs(README): update contributors
Opened
#2128 [PR #1451] [CLOSED] docs(README): update contributors
Opened
#2129 [PR #1453] [CLOSED] docs(README): update contributors
Opened
#2130 [PR #1454] [CLOSED] Update config-example.yaml
Opened
#2131 [PR #1460] [CLOSED] Add sync errorgroup handling in integration tests
Opened
#2132 [PR #1464] [CLOSED] docs(README): update contributors
Opened
#2133 [PR #1463] [MERGED] Add ca-certificates
Opened
#2134 [PR #1458] [MERGED] code reorg part 2, the database
Opened
#2135 [PR #1465] [MERGED] Clean apt in dockerfile + prepare for 0.22.3
Opened
#2136 [PR #1466] [CLOSED] docs(README): update contributors
Opened
#2137 [PR #1474] [CLOSED] fix(sec): upgrade github.com/opencontainers/runc to
Opened
#2138 [PR #1470] [CLOSED] Fixing IPv6 Parsing in ACLs
Opened
#2139 [PR #1476] [MERGED] docs(README): update contributors
Opened
#2140 [PR #1480] [CLOSED] Fix hangs on SIGTERM.
Opened
#2141 [PR #1477] [MERGED] Code reorg part 3
Opened
#2142 [PR #1483] [CLOSED] Bugfix: when db_type is set to postgres, tailscale client will be hang up for a long time
Opened
#2143 [PR #1485] [CLOSED] docs(README): update contributors
Opened
#2144 [PR #1484] [MERGED] Adjust template for OIDC callback page (from #1435)
Opened
#2145 [PR #1487] [MERGED] Codereorg: Part 4, policy improvement
Opened
#2146 [PR #1489] [CLOSED] docs(README): update contributors
Opened
#2147 [PR #1490] [CLOSED] Allow setting ForcedTags using the acls.hujson config file
Opened
#2148 [PR #1491] [MERGED] use cmp.Diff instead of reflect.DeepEqual in tests
Opened
#2149 [PR #1492] [MERGED] Codereorg: Part 5, state
Opened
#2150 [PR #1493] [CLOSED] docs(README): update contributors
Opened
#2151 [PR #1498] [CLOSED] docs(README): update contributors
Opened
#2152 [PR #1495] [MERGED] make some error logging more generic
Opened
#2153 [PR #1497] [MERGED] use nix caching and docker caching in CI
Opened
#2154 [PR #1499] [CLOSED] pin the version for docker cache github action
Opened
#2155 [PR #1502] [CLOSED] docs(README): update contributors
Opened
#2156 [PR #1512] [CLOSED] docs(README): update contributors
Opened
#2157 [PR #1503] [CLOSED] docs(README): update contributors
Opened
#2158 [PR #1513] [CLOSED] [ASSIGN CUSTOM IP] optionally assign a custom ip when registering a m…
Opened
#2159 [PR #1515] [CLOSED] Custom machine address
Opened
#2160 [PR #1517] [CLOSED] Fix typo in example config
Opened
#2161 [PR #1518] [CLOSED] Update running-headscale-container.md
Opened
#2162 [PR #1521] [CLOSED] fix invalid discord channel links to instead reference server invite and name of channel
Opened
#2163 [PR #1524] [MERGED] Send logs to stderr, rather than stdout
Opened
#2164 [PR #1525] [CLOSED] docs(README): update contributors
Opened
#2165 [PR #1527] [CLOSED] Allow to get one route by route id
Opened
#2166 [PR #1528] [CLOSED] Enhancement: Enable Account Switching for Non-Ephemeral Devices on Logout
Opened
#2167 [PR #1535] [MERGED] Handle errors in integration test setups
Opened
#2168 [PR #1540] [CLOSED] docs(README): update contributors
Opened
#2169 [PR #1544] [CLOSED] fix test fail keep user.Clients from concurrent map writes
Opened
#2170 [PR #1549] [CLOSED] docs(README): update contributors
Opened
#2171 [PR #1548] [CLOSED] Update iOS connect steps.
Opened
#2172 [PR #1546] [MERGED] Fix typo in docs - DB file path
Opened
#2173 [PR #1551] [CLOSED] embed ui
Opened
#2174 [PR #1553] [MERGED] Rename Machine to Node
Opened
#2175 [PR #1554] [CLOSED] docs(README): update contributors
Opened
#2176 [PR #1555] [MERGED] Set online status in lite requests
Opened
#2177 [PR #1556] [MERGED] remove readonly case for mapresponse, dont think it is used
Opened
#2178 [PR #1557] [MERGED] add 0.23.0 changelog entry
Opened
#2179 [PR #1558] [MERGED] docs(README): update contributors
Opened
#2180 [PR #1559] [MERGED] Add github stale action
Opened
#2181 [PR #1560] [MERGED] add note about db backup to changelog
Opened
#2182 [PR #1562] [MERGED] Restore foreign keys and add constraints
Opened
#2183 [PR #1563] [MERGED] Upgrade Go 1.21, Tailscale 1.50 and add Capability version support
Opened
#2184 [PR #1564] [MERGED] ensure online status and route changes are propagated
Opened
#2185 [PR #1565] [MERGED] Add Customization Options to DERP Map entry of integrated DERP server
Opened
#2186 [PR #1566] [MERGED] Enhance pipeline stability and automatically retry unstable tests
Opened
#2187 [PR #1573] [CLOSED] Bump golang.org/x/net from 0.14.0 to 0.17.0
Opened
#2188 [PR #1575] [MERGED] Fix/improve documentation formatting
Opened
#2189 [PR #1580] [CLOSED] feat(derp): support verify-clients
Opened
#2190 [PR #1581] [CLOSED] Bump google.golang.org/grpc from 1.55.0 to 1.56.3
Opened
#2191 [PR #1583] [MERGED] ✨ feat: add pqsql configs for open and idle connections
Opened
#2192 [PR #1585] [CLOSED] Bump github.com/docker/docker from 24.0.4+incompatible to 24.0.7+incompatible
Opened
#2193 [PR #1587] [MERGED] redundant line removed from systemd.service
Opened
#2194 [PR #1588] [MERGED] Add workflow to autoupdate flake.lock deps
Opened
#2195 [PR #1589] [MERGED] Update flake.lock
Opened
#2196 [PR #1591] [CLOSED] docs(README): update contributors
Opened
#2197 [PR #1590] [CLOSED] docs(README): update contributors
Opened
#2198 [PR #1592] [MERGED] docs(README): update contributors
Opened
#2199 [PR #1594] [CLOSED] Add OIDC claim names options
Opened
#2200 [PR #1598] [MERGED] Update flake.lock
Opened
#2201 [PR #1597] [MERGED] Update xsync to v3.0.2
Opened
#2202 [PR #1605] [CLOSED] Fix #1601 - Group examples need group: prefix
Opened
#2203 [PR #1600] [CLOSED] Add DERP generate_204 endpoint for captive portal detection.
Opened
#2204 [PR #1603] [MERGED] remove the use key stripping and store the proper keys
Opened
#2205 [PR #1606] [CLOSED] feat(route): allows conflicting subnet ranges across users
Opened
#2206 [PR #1610] [MERGED] Docs: fix path to nologin shell
Opened
#2207 [PR #1609] [MERGED] Use tailscale key types instead of strings
Opened
#2208 [PR #1611] [MERGED] Remove support for non-noise clients (pre-1.32)
Opened
#2209 [PR #1612] [MERGED] move to use tailscfg types over strings/custom types
Opened
#2210 [PR #1613] [CLOSED] docs(README): update contributors
Opened
#2211 [PR #1614] [CLOSED] Bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1
Opened
#2212 [PR #1615] [CLOSED] docs(README): update contributors
Opened
#2213 [PR #1616] [CLOSED] use latest of changed-files ci plugin
Opened
#2214 [PR #1617] [CLOSED] Allow setting ForcedTags using the acls.hujson config file
Opened
#2215 [PR #1618] [MERGED] Docs: Update running-headscale-container.md - fix link to example config
Opened
#2216 [PR #1619] [CLOSED] docs(README): update contributors
Opened
#2217 [PR #1620] [CLOSED] Do not overwrite the derpmap with default region
Opened
#2218 [PR #1621] [CLOSED] Docs: Add private key path to example config
Opened
#2219 [PR #1622] [MERGED] Fix Github Actions docs pipeline
Opened
#2220 [PR #1625] [CLOSED] docs(README): update contributors
Opened
#2221 [PR #1626] [CLOSED] docs(README): update contributors
Opened
#2222 [PR #1627] [CLOSED] docs(README): update contributors
Opened
#2223 [PR #1630] [CLOSED] fix(db): sets max open and idle connections for postgres
Opened
#2224 [PR #1628] [MERGED] upgrade go dependencies
Opened
#2225 [PR #1632] [MERGED] Update flake.lock
Opened
#2226 [PR #1631] [CLOSED] docs(README): update contributors
Opened
#2227 [PR #1639] [MERGED] docs(README): update contributors
Opened
#2228 [PR #1640] [MERGED] turn off grpc communication logging
Opened
#2229 [PR #1641] [MERGED] add breaking entry of derp priv key
Opened
#2230 [PR #1642] [MERGED] fix hostinfo db column spelling
Opened
#2231 [PR #1646] [MERGED] make stale shorter
Opened
#2232 [PR #1644] [MERGED] add versioned migrations
Opened
#2233 [PR #1647] [MERGED] implement selfupdate and pass expiry
Opened
#2234 [PR #1649] [MERGED] document setting oidc client secret cia env
Opened
#2235 [PR #1652] [MERGED] add 1.54 and 1.56 to integration tests
Opened
#2236 [PR #1657] [MERGED] Update flake.lock
Opened
#2237 [PR #1658] [MERGED] docs(windows-client): add Windows registry command
Opened
#2238 [PR #1659] [CLOSED] Running Headscale In A Container Documentation Updates.
Opened
#2239 [PR #1660] [CLOSED] Bump golang.org/x/crypto from 0.16.0 to 0.17.0
Opened
#2240 [PR #1663] [MERGED] embed (hidden) tailsql for debugging
Opened
#2241 [PR #1668] [MERGED] Use result of fmt.Errorf call
Opened
#2242 [PR #1669] [MERGED] fix issue where advertise tags causes hang
Opened
#2243 [PR #1666] [MERGED] docs: Add docs for running headscale on sealos
Opened
#2244 [PR #1670] [MERGED] ensure renabled auto-approve routes works
Opened
#2245 [PR #1672] [MERGED] Update bug_report.md
Opened
#2246 [PR #1673] [MERGED] node selfupdate and fix subnet router when ACL is enabled
Opened
#2247 [PR #1671] [CLOSED] Bump tj-actions/changed-files from 14.1 to 41 in /.github/workflows
Opened
#2248 [PR #1676] [CLOSED] docs(README): update contributors
Opened
#2249 [PR #1677] [CLOSED] docs(README): update contributors
Opened
#2250 [PR #1681] [MERGED] MagicDNS no longer requires nameservers
Opened
#2251 [PR #1682] [CLOSED] Update priavet key lines in config-example.yaml
Opened
#2252 [PR #1688] [CLOSED] docs(README): update contributors
Opened
#2253 [PR #1685] [CLOSED] WIP DB work
Opened
#2254 [PR #1689] [CLOSED] reorder node register command in html
Opened
#2255 [PR #1690] [CLOSED] docs(README): update contributors
Opened
#2256 [PR #1691] [CLOSED] docs(README): update contributors
Opened
#2257 [PR #1692] [MERGED] fix node expire error due to type in gorm model Update
Opened
#2258 [PR #1694] [CLOSED] docs(README): update contributors
Opened
#2259 [PR #1695] [CLOSED] fix recusive rwmutex rlock which cause headscale deadlock
Opened
#2260 [PR #1697] [MERGED] Trim client secret after reading from file
Opened
#2261 [PR #1698] [CLOSED] docs/reverse-proxy: use standard map, correct X-Forwarded-Proto varia…
Opened
#2262 [PR #1699] [CLOSED] docs(README): update contributors
Opened
#2263 [PR #1700] [MERGED] Restructure database config
Opened
#2264 [PR #1701] [MERGED] Replace database locks with transactions
Opened
#2265 [PR #1702] [MERGED] ✨ feat(apikey): adds command to delete api keys
Opened
#2266 [PR #1707] [MERGED] Fix failover to disabled route #1706
Opened
#2267 [PR #1713] [CLOSED] fix: Preauth key list reusable column
Opened
#2268 [PR #1715] [CLOSED] docs(README): update contributors
Opened
#2269 [PR #1716] [MERGED] Build docker images with ko (goreleaser)
Opened
#2270 [PR #1719] [MERGED] Login with OIDC after having been logged out
Opened
#2271 [PR #1720] [CLOSED] docs(README): update contributors
Opened
#2272 [PR #1724] [CLOSED] docs(README): update contributors
Opened
#2273 [PR #1723] [MERGED] Add assert func for verifying status, netmap and netcheck
Opened
#2274 [PR #1726] [CLOSED] docs(README): update contributors
Opened
#2275 [PR #1727] [CLOSED] docs(README): update contributors
Opened
#2276 [PR #1729] [MERGED] Get integration test netmap from watch-ipn command
Opened
#2277 [PR #1728] [MERGED] Upgrade to Go 1.22 and update deps
Opened
#2278 [PR #1730] [MERGED] Prepare notify channel before sending first update
Opened
#2279 [PR #1731] [CLOSED] docs(README): update contributors
Opened
#2280 [PR #1732] [CLOSED] docs(README): update contributors
Opened
#2281 [PR #1733] [MERGED] TLS documentation updates
Opened
#2282 [PR #1736] [CLOSED] docs(README): update contributors
Opened
#2283 [PR #1737] [CLOSED] docs(README): update contributors
Opened
#2284 [PR #1734] [MERGED] Allow when user has only a subnet route
Opened
#2285 [PR #1738] [CLOSED] docs(README): update contributors
Opened
#2286 [PR #1739] [CLOSED] docs(README): update contributors
Opened
#2287 [PR #1740] [CLOSED] docs(README): update contributors
Opened
#2288 [PR #1741] [CLOSED] docs(README): update contributors
Opened
#2289 [PR #1742] [MERGED] remove quotes from command
Opened
#2290 [PR #1743] [CLOSED] docs(README): update contributors
Opened
#2291 [PR #1744] [MERGED] login to docker registries
Opened
#2292 [PR #1745] [CLOSED] docs(README): update contributors
Opened
#2293 [PR #1749] [CLOSED] docs(README): update contributors
Opened
#2294 [PR #1746] [MERGED] Reduce poll logging to debug
Opened
#2295 [PR #1750] [CLOSED] docs(README): update contributors
Opened
#2296 [PR #1751] [MERGED] fix ko dockerhub builds
Opened
#2297 [PR #1752] [CLOSED] docs(README): update contributors
Opened
#2298 [PR #1754] [MERGED] drop unused last_successful_update field from node table
Opened
#2299 [PR #1753] [CLOSED] docs(README): update contributors
Opened
#2300 [PR #1756] [MERGED] new IP allocator and add postgres to integration tests.
Opened
#2301 [PR #1759] [CLOSED] fix docker tagging
Opened
#2302 [PR #1762] [MERGED] rollback gorm, broke migration #1755
Opened
#2303 [PR #1763] [MERGED] rework docker tags
Opened
#2304 [PR #1764] [CLOSED] docs(README): update contributors
Opened
#2305 [PR #1765] [MERGED] improve errors for missing directories
Opened
#2306 [PR #1768] [CLOSED] Derp204 dockernetworking
Opened
#2307 [PR #1766] [MERGED] make database configuration change breaking
Opened
#2308 [PR #1769] [CLOSED] docs(README): update contributors
Opened
#2309 [PR #1770] [CLOSED] docs(README): update contributors
Opened
#2310 [PR #1771] [CLOSED] docs(README): update contributors
Opened
#2311 [PR #1773] [MERGED] replace linter actions with nix to ensure consistent version
Opened
#2312 [PR #1777] [CLOSED] docs(README): update contributors
Opened
#2313 [PR #1772] [CLOSED] docs(README): update contributors
Opened
#2314 [PR #1778] [CLOSED] docs(README): update contributors
Opened
#2315 [PR #1779] [CLOSED] docs(README): update contributors
Opened
#2316 [PR #1781] [MERGED] fix ifs in goreleaser gotemplate
Opened
#2317 [PR #1782] [CLOSED] docs(README): update contributors
Opened
#2318 [PR #1784] [CLOSED] docs(README): update contributors
Opened
#2319 [PR #1783] [MERGED] move debug inside if in docker goreleaser tag
Opened
#2320 [PR #1791] [MERGED] rework mapsession
Opened
#2321 [PR #1792] [MERGED] feat: implements apis for managing headscale policy
Opened
#2322 [PR #1794] [CLOSED] Update config-example.yaml for new db settings
Opened
#2323 [PR #1799] [MERGED] simplify integration testing with matrix jobs
Opened
#2324 [PR #1790] [MERGED] docs/reverse-proxy: use standard map, correct X-Forwarded-Proto varia…
Opened
#2325 [PR #1801] [CLOSED] fix: keep the update channel from being cleaned up
Opened
#2326 [PR #1802] [MERGED] fix postgres migration
Opened
#2327 [PR #1804] [CLOSED] docs(README): update contributors
Opened
#2328 [PR #1807] [MERGED] Ephemeral keys can now be reusable and non-reusable
Opened
#2329 [PR #1806] [CLOSED] docs(README): update contributors
Opened
#2330 [PR #1809] [MERGED] update gh workflow actions
Opened
#2331 [PR #1808] [CLOSED] docs(README): update contributors
Opened
#2332 [PR #1812] [CLOSED] add PKCE verifier for OIDC
Opened
#2333 [PR #1815] [CLOSED] Defaults to deny all rather than accept all if no acl policy defined
Opened
#2334 [PR #1819] [CLOSED] docs(README): update contributors
Opened
#2335 [PR #1820] [CLOSED] feat: Support SSH session recording configuration
Opened
#2336 [PR #1823] [MERGED] feat: derpmap field in config
Opened
#2337 [PR #1826] [CLOSED] docs(README): update contributors
Opened
#2338 [PR #1829] [CLOSED] docs(README): update contributors
Opened
#2339 [PR #1830] [CLOSED] docs(README): update contributors
Opened
#2340 [PR #1832] [MERGED] update docs workflow
Opened
#2341 [PR #1834] [MERGED] docs(README): update contributors
Opened
#2342 [PR #1839] [CLOSED] docs(README): update contributors
Opened
#2343 [PR #1833] [MERGED] Update flake.lock
Opened
#2344 [PR #1843] [MERGED] Downgrade update sent to debug
Opened
#2345 [PR #1844] [CLOSED] docs(README): update contributors
Opened
#2346 [PR #1845] [CLOSED] docs(README): update contributors
Opened
#2347 [PR #1846] [CLOSED] docs(README): update contributors
Opened
#2348 [PR #1847] [CLOSED] docs(README): update contributors
Opened
#2349 [PR #1848] [MERGED] Update flake.lock
Opened
#2350 [PR #1853] [MERGED] Use newer fork of termcolor
Opened
#2351 [PR #1854] [MERGED] docs: Add FAQ question about using the same machine as server and client
Opened
#2352 [PR #1858] [CLOSED] Add google workspace OIDC group support
Opened
#2353 [PR #1860] [MERGED] Fix typos
Opened
#2354 [PR #1864] [MERGED] Updated dependencies, fixing segfault for OpenBSD
Opened
#2355 [PR #1865] [CLOSED] docs(README): update contributors
Opened
#2356 [PR #1866] [MERGED] chore: fix function names in comment
Opened
#2357 [PR #1867] [CLOSED] docs(README): update contributors
Opened
#2358 [PR #1870] [CLOSED] feat: add config to overwrite grpc certificate
Opened
#2359 [PR #1869] [MERGED] Migrate IP fields in database to dedicated columns
Opened
#2360 [PR #1871] [CLOSED] docs(README): update contributors
Opened
#2361 [PR #1872] [MERGED] move "embedded derp" settings into With options for integration tests
Opened
#2362 [PR #1875] [CLOSED] docs(README): update contributors
Opened
#2363 [PR #1874] [CLOSED] docs(README): update contributors
Opened
#2364 [PR #1876] [CLOSED] docs(README): update contributors
Opened
#2365 [PR #1877] [MERGED] Log available update as warning
Opened
#2366 [PR #1878] [MERGED] fix ip migration
Opened
#2367 [PR #1881] [CLOSED] docs(README): update contributors
Opened
#2368 [PR #1880] [CLOSED] docs(README): update contributors
Opened
#2369 [PR #1882] [MERGED] Fix crash when a prefix family was empty
Opened
#2370 [PR #1886] [MERGED] Remove unused node check interval
Opened
#2371 [PR #1887] [CLOSED] docs(web-ui) Add Headscale Admin in web-ui
Opened
#2372 [PR #1884] [CLOSED] docs(README): update contributors
Opened
#2373 [PR #1888] [CLOSED] docs(README): update contributors
Opened
#2374 [PR #1889] [MERGED] docs(readme): change contributors section
Opened
#2375 [PR #1890] [MERGED] Allow to remove forced tags of a node
Opened
#2376 [PR #1891] [CLOSED] docs(README): update contributors
Opened
#2377 [PR #1893] [MERGED] Add test stage to docs
Opened
#2378 [PR #1892] [MERGED] Add the headscale-admin UI to the docs
Opened
#2379 [PR #1894] [CLOSED] docs(README): update contributors
Opened
#2380 [PR #1897] [MERGED] Update flake.lock
Opened
#2381 [PR #1895] [MERGED] metrics, tuning in tests, db cleanups, fix concurrency issue
Opened
#2382 [PR #1898] [CLOSED] docs(README): update contributors
Opened
#2383 [PR #1899] [MERGED] fix prettier
Opened
#2384 [PR #1900] [CLOSED] docs(README): update contributors
Opened
#2385 [PR #1901] [MERGED] chore: use errors.New to replace fmt.Errorf with no parameters will much better.
Opened
#2386 [PR #1903] [MERGED] remove multistep build, build go last, allowing cached build layers (for debug image)
Opened
#2387 [PR #1902] [MERGED] Move pprof handler to metrics endpoint
Opened
#2388 [PR #1904] [CLOSED] try to close on existing connection, also reject
Opened
#2389 [PR #1905] [MERGED] batch updates in notifier
Opened
#2390 [PR #1907] [MERGED] Add contributing document
Opened
#2391 [PR #1908] [MERGED] Clarify relation with Tailscale
Opened
#2392 [PR #1906] [MERGED] remove examples/, and kustomize
Opened
#2393 [PR #1912] [MERGED] Do not access node ID when node is not found
Opened
#2394 [PR #1909] [MERGED] replace issue templates with github issue forms
Opened
#2395 [PR #1914] [CLOSED] fix issue #1817
Opened
#2396 [PR #1917] [MERGED] add autogroup:internet, fix reduce filter rules
Opened
#2397 [PR #1915] [MERGED] low priority PR - Update OpenBSD installation docs for 2024
Opened
#2398 [PR #1919] [MERGED] fix issue preveting get node when disco is missing
Opened
#2399 [PR #1918] [MERGED] error if no prefix is configured
Opened
#2400 [PR #1920] [MERGED] fix preauth key logging in as previous user
Opened
#2401 [PR #1922] [MERGED] trace log and notifier shutdown
Opened
#2402 [PR #1924] [MERGED] ensure expire routines are cleaned up
Opened
#2403 [PR #1931] [MERGED] Simplify map session management
Opened
#2404 [PR #1927] [MERGED] [DOCS] Make linux installation instructions more clear
Opened
#2405 [PR #1934] [CLOSED] re-construct OIDC config and flatten keycloak groups
Opened
#2406 [PR #1933] [CLOSED] Document Headscale web ui
Opened
#2407 [PR #1937] [CLOSED] Added api endpoint for get getting ACL info (groups and tagOwners)
Opened
#2408 [PR #1938] [CLOSED] Added HostInfo output to Node response
Opened
#2409 [PR #1939] [MERGED] Initialize log config earlier to prevent trace messages being printed early on
Opened
#2410 [PR #1943] [MERGED] Bump golang.org/x/net from 0.22.0 to 0.23.0
Opened
#2411 [PR #1944] [MERGED] Bump google.golang.org/protobuf from 1.32.0 to 1.33.0
Opened
#2412 [PR #1941] [CLOSED] Include ca-certificates in Dockerfile.debug
Opened
#2413 [PR #1945] [MERGED] Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3
Opened
#2414 [PR #1946] [MERGED] Bump github.com/jackc/pgx/v5 from 5.5.3 to 5.5.4
Opened
#2415 [PR #1949] [CLOSED] add download page
Opened
#2416 [PR #1948] [MERGED] update tailscale go dep
Opened
#2417 [PR #1950] [MERGED] move debug image to distroless
Opened
#2418 [PR #1947] [MERGED] Bump github.com/docker/docker from 25.0.3+incompatible to 25.0.5+incompatible
Opened
#2419 [PR #1952] [MERGED] Update flake.lock
Opened
#2420 [PR #1957] [CLOSED] feat: support client verify for derp
Opened
#2421 [PR #1958] [MERGED] Update flake.lock
Opened
#2422 [PR #1960] [MERGED] fixed typo and path
Opened
#2423 [PR #1965] [CLOSED] imporve documentation development
Opened
#2424 [PR #1959] [MERGED] remove last_successful_update error check
Opened
#2425 [PR #1970] [CLOSED] fix the problem of systemctl stop headscale is very slow
Opened
#2426 [PR #1971] [CLOSED] fix the problem of systemctl stop headscale is very slow
Opened
#2427 [PR #1975] [MERGED] Make registration screen easier to use
Opened
#2428 [PR #1972] [CLOSED] feat: HTML template to register a node
Opened
#2429 [PR #1976] [MERGED] Fix Android docs
Opened
#2430 [PR #1979] [MERGED] Update flake.lock
Opened
#2431 [PR #1981] [CLOSED] feat: oidc profile picture and display name
Opened
#2432 [PR #1986] [MERGED] Update reverse-proxy.md
Opened
#2433 [PR #1985] [MERGED] Make write-ahead-log default and configurable for sqlite
Opened
#2434 [PR #1987] [MERGED] fix search domains and remove username from magicdns
Opened
#2435 [PR #1989] [MERGED] Remove allocations of lists before use
Opened
#2436 [PR #1991] [MERGED] Update flake.lock
Opened
#2437 [PR #1994] [CLOSED] Properly render ACL in documentation
Opened
#2438 [PR #1995] [CLOSED] chore: updated windows client docs
Opened
#2439 [PR #1997] [CLOSED] adding oidc desired username as option in config
Opened
#2440 [PR #1998] [CLOSED] Add Discord Support
Opened
#2441 [PR #2000] [MERGED] Update flake.lock
Opened
#2442 [PR #2003] [CLOSED] Bump google.golang.org/grpc from 1.64.0 to 1.64.1
Opened
#2443 [PR #2005] [MERGED] chore: configure some actions to be skipped for forks
Opened
#2444 [PR #2008] [MERGED] replace ephemeral deletion logic
Opened
#2445 [PR #2010] [MERGED] Add gofumpt to dev dependencies
Opened
#2446 [PR #2011] [MERGED] Update flake.lock
Opened
#2447 [PR #2013] [MERGED] fix(1996): Implement register method enum converter
Opened
#2448 [PR #2009] [MERGED] Remove deprecated linters from golangci-lint
Opened
#2449 [PR #2014] [MERGED] move userprofiles into method on user struct
Opened
#2450 [PR #2018] [MERGED] actually lint file on CI
Opened
#2451 [PR #2017] [MERGED] small cleanups
Opened
#2452 [PR #2015] [MERGED] remove custom contains funcs for slices.Contains
Opened
#2453 [PR #2019] [MERGED] reformat code
Opened
#2454 [PR #2020] [MERGED] Redo OIDC configuration
Opened
#2455 [PR #2021] [MERGED] Update flake.lock
Opened
#2456 [PR #2023] [MERGED] Fix data race issues in EphemeralGarbageCollector tests
Opened
#2457 [PR #2022] [MERGED] config-example.yaml: Remove reference to yaml for policy files
Opened
#2458 [PR #2030] [MERGED] test embedded derp with derp updater, check client health
Opened
#2459 [PR #2034] [MERGED] Redo DNS configuration
Opened
#2460 [PR #2035] [MERGED] Update flake.lock
Opened
#2461 [PR #2037] [CLOSED] Bump github.com/docker/docker from 26.1.3+incompatible to 26.1.4+incompatible
Opened
#2462 [PR #2038] [MERGED] Add -race Flag to GitHub Action and Fix Data Race in CreateTailscaleNodesInUser
Opened
#2463 [PR #2040] [MERGED] Integrate GORM Logger with Zerolog and Add Configuration Options for Logging and Performance
Opened
#2464 [PR #2041] [MERGED] make acl_policy_path fatal if policy.path is not set
Opened
#2465 [PR #2042] [MERGED] Update flake.lock
Opened
#2466 [PR #2046] [MERGED] feat: support client verify for derp (add integration tests)
Opened
#2467 [PR #2049] [CLOSED] Bump github.com/docker/docker from 26.1.3+incompatible to 26.1.5+incompatible
Opened
#2468 [PR #2051] [MERGED] Fix command get policy works with relative policy path
Opened
#2469 [PR #2052] [MERGED] Update flake.lock
Opened
#2470 [PR #2054] [CLOSED] Linux installation documentation update
Opened
#2471 [PR #2057] [CLOSED] Don't overwrite previously filled dnsConfig.Domains
Opened
#2472 [PR #2058] [CLOSED] build docker images on PR
Opened
#2473 [PR #2053] [CLOSED] build docker images on PR
Opened
#2474 [PR #2059] [MERGED] Update flake.lock
Opened
#2475 [PR #2060] [MERGED] add coderabbit config
Opened
#2476 [PR #2066] [MERGED] Docs: Update ACLs on file formats
Opened
#2477 [PR #2069] [MERGED] chore: fix some comments
Opened
#2478 [PR #2075] [MERGED] fix warning errs from beta2
Opened
#2479 [PR #2071] [MERGED] Issue 2045, Feature Request
Opened
#2480 [PR #2076] [MERGED] fix route table migration wiping routes 0.22 -> 0.23
Opened
#2481 [PR #2078] [MERGED] Update flake.lock
Opened
#2482 [PR #2080] [MERGED] Fix self notification on expiry update via oidc relogin
Opened
#2483 [PR #2081] [MERGED] fix: correct a small spelling mistake
Opened
#2484 [PR #2077] [MERGED] upgrade go (1.23) and tailscale (1.72.1)
Opened
#2485 [PR #2086] [MERGED] oldest client supported, not latest
Opened
#2486 [PR #2089] [MERGED] validate policy against nodes, error if not valid
Opened
#2487 [PR #2083] [MERGED] Fix FKs on sqllite migrations
Opened
#2488 [PR #2091] [MERGED] various doc updates in prep for 0.23
Opened
#2489 [PR #2088] [MERGED] Remove references to tests/acls from the documentation
Opened
#2490 [PR #2093] [MERGED] Fix 764
Opened
#2491 [PR #2095] [MERGED] Fix typo in example config
Opened
#2492 [PR #2092] [MERGED] Use dns: as config key
Opened
#2493 [PR #2096] [MERGED] Update documentation for 0.23
Opened
#2494 [PR #2098] [MERGED] update godeps
Opened
#2495 [PR #2100] [MERGED] Move flags after the command
Opened
#2496 [PR #2099] [CLOSED] Bump github.com/opencontainers/runc from 1.1.12 to 1.1.14
Opened
#2497 [PR #2102] [MERGED] Add support for service reload and sync service file
Opened
#2498 [PR #2104] [MERGED] Remove outdated proposals
Opened
#2499 [PR #2105] [MERGED] 2068 AutoApprovers tests
Opened
#2500 [PR #2106] [MERGED] fix goreleaser warnings
Opened
#2501 [PR #2107] [MERGED] add no stalebot exception
Opened
#2502 [PR #2108] [CLOSED] add support for user-defined templates
Opened
#2503 [PR #2109] [MERGED] Only load needed part of configuration
Opened
#2504 [PR #2111] [MERGED] Update flake.lock
Opened
#2505 [PR #2112] [MERGED] Remove version and update setup instructions for Android
Opened
#2506 [PR #2113] [MERGED] Fix slow shutdown
Opened
#2507 [PR #2114] [MERGED] Simplify windows setup instructions
Opened
#2508 [PR #2116] [MERGED] dont override golangci go
Opened
#2509 [PR #2117] [MERGED] Update documentation for Apple
Opened
#2510 [PR #2124] [MERGED] make cli mode respect log.level
Opened
#2511 [PR #2122] [MERGED] Use headscale.example.com
Opened
#2512 [PR #2120] [CLOSED] changed the html string in the hscontrol/handlers.go file using go-elem
Opened
#2513 [PR #2125] [MERGED] make stream shutdown if self-node has been removed
Opened
#2514 [PR #2126] [MERGED] add shutdown that asserts if headscale had panics
Opened
#2515 [PR #2127] [MERGED] move logic for validating node names
Opened
#2516 [PR #2132] [MERGED] Add compatibility with only websocket-capable clients
Opened
#2517 [PR #2131] [CLOSED] Fix nodes not getting set to offline when disconnects
Opened
#2518 [PR #2135] [MERGED] Update flake.lock
Opened
#2519 [PR #2134] [MERGED] Update headscale user creation settings in .deb
Opened
#2520 [PR #2138] [MERGED] update changelog for 0.23 release
Opened
#2521 [PR #2136] [MERGED] Exclude irrelevant files from mkdocs rendering
Opened
#2522 [PR #2143] [MERGED] Update flake.lock
Opened
#2523 [PR #2148] [MERGED] Add -it to docker exec
Opened
#2524 [PR #2145] [MERGED] Allow nodes to use SSH agent forwarding
Opened
#2525 [PR #2149] [MERGED] remove versions older than 1.56
Opened
#2526 [PR #2150] [MERGED] use tsaddr library and cleanups
Opened
#2527 [PR #2156] [MERGED] use gorm serialiser instead of custom hooks
Opened
#2528 [PR #2155] [MERGED] denormalise PreAuthKey tags
Opened
#2529 [PR #2154] [MERGED] [docs] Add Ouroboros to community web ui list
Opened
#2530 [PR #2158] [MERGED] Update flake.lock
Opened
#2531 [PR #2163] [MERGED] Restructure headscale documentation
Opened
#2532 [PR #2165] [MERGED] set hostinfo,ipv* columns explicitly
Opened
#2533 [PR #2161] [MERGED] Changed all the html into go using go-elem
Opened
#2534 [PR #2167] [MERGED] make reauth test compat with tailscale head
Opened
#2535 [PR #2170] [MERGED] Harden OIDC migration and make optional
Opened
#2536 [PR #2179] [MERGED] #2178 Fixed processing of fields in post request in MoveNode rpc
Opened
#2537 [PR #2173] [MERGED] Update flake.lock
Opened
#2538 [PR #2184] [CLOSED] use https for other relogin tests
Opened
#2539 [PR #2185] [CLOSED] #2177 Added conversion of 'Hostname' to 'givenName' in a node by applying FQDN rules
Opened
#2540 [PR #2187] [MERGED] Fixed loginUrl with "WithTLS()" used. Added "WithTLS()" to scenario integration tests
Opened
#2541 [PR #2195] [MERGED] Update flake.lock
Opened
#2542 [PR #2198] [MERGED] #2177 Added conversion of 'Hostname' to 'givenName' in a node with FQDN rules applied
Opened
#2543 [PR #2191] [MERGED] Add Headplane to web-ui docs
Opened
#2544 [PR #2199] [MERGED] #2140 Fixed reflection of hostname change
Opened
#2545 [PR #2202] [MERGED] add new user fields to grpc and list command
Opened
#2546 [PR #2206] [MERGED] cleanup linter warnings
Opened
#2547 [PR #2205] [MERGED] Resolve user to stable unique ID in policy
Opened
#2548 [PR #2207] [MERGED] add nblock to doc owners
Opened
#2549 [PR #2212] [MERGED] more linter fixups
Opened
#2550 [PR #2214] [MERGED] Experimental implementation of Policy v2
Opened
#2551 [PR #2215] [CLOSED] wrap policy in a manager interface
Opened
#2552 [PR #2217] [MERGED] Add a page for third-party tools
Opened
#2553 [PR #2221] [CLOSED] Remove dockerfile bloat
Opened
#2554 [PR #2216] [MERGED] Refresh remote CLI documentation
Opened
#2555 [PR #2226] [MERGED] Feature tvos documentation
Opened
#2556 [PR #2225] [MERGED] rename dockerfile to integration to avoid confusion
Opened
#2557 [PR #2222] [MERGED] Update flake.lock
Opened
#2558 [PR #2227] [MERGED] Handle /derp/latency-check
Opened
#2559 [PR #2230] [CLOSED] feat: Add autogroup ACLs
Opened
#2560 [PR #2233] [CLOSED] Use a more direct and less error-prone return value
Opened
#2561 [PR #2235] [MERGED] Use discord server invite link
Opened
#2562 [PR #2232] [MERGED] fix: missing stable-debug tag
Opened
#2563 [PR #2239] [MERGED] Update flake.lock
Opened
#2564 [PR #2240] [MERGED] Misc doc fixes
Opened
#2565 [PR #2243] [MERGED] Update tls.md to mention using the full cert chain
Opened
#2566 [PR #2242] [MERGED] make configurable wal auto checkpoint
Opened
#2567 [PR #2245] [CLOSED] #2176 Manual approval of the node
Opened
#2568 [PR #2247] [MERGED] Websocket derp test fixes
Opened
#2569 [PR #2248] [MERGED] config: loosen up BaseDomain and ServerURL checks
Opened
#2570 [PR #2252] [MERGED] Documentation dependencies
Opened
#2571 [PR #2254] [MERGED] Update flake.lock
Opened
#2572 [PR #2258] [MERGED] Bump deprecated github actions
Opened
#2573 [PR #2255] [MERGED] wrap policy in policy manager interface
Opened
#2574 [PR #2260] [MERGED] feat: add verify client config for embedded DERP
Opened
#2575 [PR #2261] [MERGED] restructure command/api to use stable IDs
Opened
#2576 [PR #2265] [MERGED] Add versioned documentation
Opened
#2577 [PR #2269] [MERGED] Add FAQ entry on which database to use
Opened
#2578 [PR #2266] [MERGED] Update flake.lock
Opened
#2579 [PR #2270] [MERGED] run cross compile of headscale as part of build
Opened
#2580 [PR #2271] [MERGED] Add worker reading extra_records_path from file
Opened
#2581 [PR #2273] [MERGED] fix docker network caps
Opened
#2582 [PR #2279] [MERGED] Remove use_username_in_magic_dns option
Opened
#2583 [PR #2280] [CLOSED] feat: allow setting node registration expiration via config
Opened
#2584 [PR #2281] [CLOSED] Bump golang.org/x/crypto from 0.26.0 to 0.31.0
Opened
#2585 [PR #2283] [CLOSED] Misc typos
Opened
#2586 [PR #2282] [CLOSED] chore: use errors.New to replace fmt.Errorf with no parameters
Opened
#2587 [PR #2285] [MERGED] update oidc part of changelog for 0.24.0
Opened
#2588 [PR #2286] [MERGED] fix deletion of exit routes without nodes
Opened
#2589 [PR #2292] [MERGED] Prepare docs for 0.24.0
Opened
#2590 [PR #2294] [MERGED] Update flake.lock
Opened
#2591 [PR #2297] [MERGED] fix issue where some oidc claim bools are sent as string
Opened
#2592 [PR #2296] [MERGED] fix sighup issue with empty acl
Opened
#2593 [PR #2302] Headscale: Added an option to set an Access-Control-Allow-Origin resp…
Opened
#2594 [PR #2298] [MERGED] fixes to extra-record file watcher
Opened
#2595 [PR #2306] [MERGED] Correct macOS GUI connect guide because there's no ALT key on a mac
Opened
#2596 [PR #2303] [CLOSED] docs: update ios configuration docs
Opened
#2597 [PR #2308] [MERGED] bump deps
Opened
#2598 [PR #2312] [CLOSED] feat: tailscale serve support
Opened
#2599 [PR #2309] [MERGED] fix tags not resolving to username if email is present
Opened
#2600 [PR #2313] [MERGED] Update flake.lock
Opened
#2601 [PR #2315] add Tampering Test for PKCE
Opened
#2602 [PR #2314] [MERGED] feat: Add PKCE Verifier for OIDC
Opened
#2603 [PR #2320] [MERGED] Update flake.lock
Opened
#2604 [PR #2321] [MERGED] Update apple.md for latest version of iOS
Opened
#2605 [PR #2322] [MERGED] feat: Create headscale user and group as system user/groups
Opened
#2606 [PR #2324] [MERGED] Update flake.lock
Opened
#2607 [PR #2328] [MERGED] Set CSRF cookies for OIDC
Opened
#2608 [PR #2331] [MERGED] Fix typos
Opened
#2609 [PR #2329] [CLOSED] feat: Support for (nextDNS) node attributes (nodeattrs)
Opened
#2610 [PR #2338] [MERGED] use headscale server url as domain instead of base_domain
Opened
#2611 [PR #2340] [MERGED] allow @ and Log if OIDC username is not consider valid
Opened
#2612 [PR #2339] [MERGED] fix nil pointer deref
Opened
#2613 [PR #2337] [MERGED] use dedicated registration ID for auth flow
Opened
#2614 [PR #2334] [CLOSED] Bump golang.org/x/net from 0.32.0 to 0.33.0
Opened
#2615 [PR #2344] [CLOSED] Split MagicDNS base domain and org domain
Opened
#2616 [PR #2345] [CLOSED] mark TestOIDC024UserCreation as flaky
Opened
#2617 [PR #2342] [MERGED] Update flake.lock
Opened
#2618 [PR #2346] [CLOSED] remove retry
Opened
#2619 [PR #2347] [MERGED] set changelog date for 0.24
Opened
#2620 [PR #2348] [CLOSED] add TestOIDCReloginSameNode
Opened
#2621 [PR #2350] [MERGED] set oidc.map_legacy_users false
Opened
#2622 [PR #2349] [MERGED] Release docs 0.24
Opened
#2623 [PR #2353] [MERGED] Update flake.lock
Opened
#2624 [PR #2357] [CLOSED] refactor: converted headscale.swagger.json to openapi 3.0 + bearer auth
Opened
#2625 [PR #2364] [MERGED] relax user validation to allow emails, add tests from various oidc providers
Opened
#2626 [PR #2368] [MERGED] fix panic if derp update is 0
Opened
#2627 [PR #2370] [CLOSED] Fixes #2369: panic when derp autoupdate isn't enabled
Opened
#2628 [PR #2367] [MERGED] fix postgres migration issue with 0.24
Opened
#2629 [PR #2358] [MERGED] Headscale implements a single tailnet
Opened
#2630 [PR #2371] [MERGED] make it harder to insert invalid routes
Opened
#2631 [PR #2372] [CLOSED] test gh actions ARM runners
Opened
#2632 [PR #2378] [MERGED] Update flake.lock
Opened
#2633 [PR #2374] [MERGED] Rewrite authentication flow
Opened
#2634 [PR #2380] [CLOSED] Spell check and updating docs
Opened
#2635 [PR #2381] [MERGED] create and rename usernames validated by new func
Opened
#2636 [PR #2383] [MERGED] stricter hostname validation and replace
Opened
#2637 [PR #2386] [MERGED] Remove routes without a node_id
Opened
#2638 [PR #2388] [MERGED] simplify findUserByToken in ACL, add missing testcases
Opened
#2639 [PR #2384] [MERGED] clean up handler methods, common logging
Opened
#2640 [PR #2392] [CLOSED] Fix CVEs
Opened
#2641 [PR #2391] [MERGED] initial capver packet tracking version
Opened
#2642 [PR #2393] [MERGED] no edit of oidc users, minimum hostname length
Opened
#2643 [PR #2396] [MERGED] do not allow preauth keys to be deleted if assigned to node
Opened
#2644 [PR #2394] [MERGED] add 1.80 to capver and update deps
Opened
#2645 [PR #2400] [CLOSED] config for nginx proxy manager
Opened
#2646 [PR #2405] [MERGED] drop versions older than 1.62
Opened
#2647 [PR #2402] [MERGED] Update flake.lock
Opened
#2648 [PR #2398] [MERGED] Return better web errors to the user
Opened
#2649 [PR #2407] [MERGED] Spell check
Opened
#2650 [PR #2410] [MERGED] use helper function for constructing state updates
Opened
#2651 [PR #2411] [MERGED] remove oidc migration
Opened
#2652 [PR #2412] [MERGED] hscontrol/db: add migration setting non existing pak on nodes to null
Opened
#2653 [PR #2413] [MERGED] make version info in bug template more explicit
Opened
#2654 [PR #2414] [MERGED] update changelog
Opened
#2655 [PR #2415] [MERGED] add git hash to binary, print on startup
Opened
#2656 [PR #2420] [MERGED] use tsweb debugger
Opened
#2657 [PR #2419] [MERGED] Update flake.lock
Opened
#2658 [PR #2423] [MERGED] set 0.25.0 changelog date
Opened
#2659 [PR #2422] [MERGED] redo all route code
Opened
#2660 [PR #2426] [MERGED] use tailscale version in all unsupported errs
Opened
#2661 [PR #2424] [MERGED] activate json logs
Opened
#2662 [PR #2427] [MERGED] update to go 1.24
Opened
#2663 [PR #2429] [MERGED] remove policy handling for old capver
Opened
#2664 [PR #2430] [MERGED] Update flake.lock
Opened
#2665 [PR #2435] [MERGED] handle register auth errors
Opened
#2666 [PR #2437] [CLOSED] use internal derp for most integration tests
Opened
#2667 [PR #2438] [MERGED] Restore support for "Override local DNS"
Opened
#2668 [PR #2444] [MERGED] fix routes not being saved when new nodes registers
Opened
#2669 [PR #2440] [MERGED] Update flake.lock
Opened
#2670 [PR #2451] [CLOSED] Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4
Opened
#2671 [PR #2457] [MERGED] Drop route table
Opened
#2672 [PR #2448] [CLOSED] Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
Opened
#2673 [PR #2454] [MERGED] Update flake.lock
Opened
#2674 [PR #2445] [MERGED] fix double login URL with OIDC
Opened
#2675 [PR #2460] Add ExtendNodeExpiration functionality to gRPC and CLI
Opened
#2676 [PR #2464] [MERGED] Multi network integration tests
Opened
#2677 [PR #2461] [CLOSED] 📝 Update documentation to support i18n, add Chinese.
Opened
#2678 [PR #2470] [MERGED] Container images are also available on GHCR
Opened
#2679 [PR #2468] [MERGED] Update flake.lock
Opened
#2680 [PR #2473] [CLOSED] Bump golang.org/x/net from 0.34.0 to 0.36.0
Opened
#2681 [PR #2474] [MERGED] add casbin user test
Opened
#2682 [PR #2476] [MERGED] add faq section on scaling/performance
Opened
#2683 [PR #2477] [MERGED] Add a FAQ entry about two nodes seeing each other
Opened
#2684 [PR #2478] [MERGED] Set content-type to JSON for some debug endpoints
Opened
#2685 [PR #2481] [MERGED] update bug template with debug
Opened
#2686 [PR #2482] [MERGED] Remove coderabbit
Opened
#2687 [PR #2483] [MERGED] Adds the new third-party tool to the documentation
Opened
#2688 [PR #2488] [MERGED] Explicitly handle /headscale/{config,lib,run} in container docs
Opened
#2689 [PR #2489] [MERGED] populate serving from primary routes
Opened
#2690 [PR #2490] [MERGED] error on undefined host in policy
Opened
#2691 [PR #2493] [MERGED] OIDC: Fetch UserInfo to get EmailVerified if necessary
Opened
#2692 [PR #2495] [MERGED] allow users to be defined with @ in v1
Opened
#2693 [PR #2496] [MERGED] Add documentation for routes
Opened
#2694 [PR #2498] [CLOSED] Bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2
Opened
#2695 [PR #2503] [MERGED] ensure final dot on node name
Opened
#2696 [PR #2505] [MERGED] Update oidc.md
Opened
#2697 [PR #2506] [MERGED] fix auto approver on register and new policy
Opened
#2698 [PR #2507] [MERGED] flake: add golang-lint lsp
Opened
#2699 [PR #2509] [MERGED] Only read relevant nodes from database in PeerChangedResponse
Opened
#2700 [PR #2510] [MERGED] Update flake.lock
Opened
#2701 [PR #2514] [MERGED] Make matchers part of the Policy interface
Opened
#2702 [PR #2515] [MERGED] Add unraid-headscale-admin web UI to docs
Opened
#2703 [PR #2518] [MERGED] Update flake.lock
Opened
#2704 [PR #2522] [MERGED] update capmap and deps for release
Opened
#2705 [PR #2528] [MERGED] fix webauth + autoapprove routes
Opened
#2706 [PR #2529] [CLOSED] Bump github.com/gorilla/csrf from 1.7.3-0.20250123201450-9dd6af1f6d30 to 1.7.3
Opened
#2707 [PR #2531] [MERGED] code comment around tags
Opened
#2708 [PR #2530] [CLOSED] Bump golang.org/x/crypto from 0.32.0 to 0.35.0
Opened
#2709 [PR #2532] [MERGED] more wait, more retry
Opened
#2710 [PR #2533] [MERGED] policy/v2: fix host validation, consistent pattern
Opened
#2711 [PR #2534] [MERGED] integration: clean up unreferenced hs- networks
Opened
#2712 [PR #2536] [MERGED] Fix panic on fast reconnection of node
Opened
#2713 [PR #2537] [CLOSED] Bump golang.org/x/net from 0.34.0 to 0.38.0
Opened
#2714 [PR #2538] [MERGED] Fix goroutine leak in EphemeralGC on node cancel
Opened
#2715 [PR #2541] [MERGED] Mention "Network flow logs" as a missing feature in the documentation
Opened
#2716 [PR #2544] [MERGED] config: disallow same server url and base_domain
Opened
#2717 [PR #2542] [MERGED] types/authkey: include user object in response
Opened
#2718 [PR #2543] [MERGED] notify nodes after owner change
Opened
#2719 [PR #2545] [MERGED] oidc: try to get username from userinfo
Opened
#2720 [PR #2546] [MERGED] policy/v2: make default
Opened
#2721 [PR #2548] [CLOSED] Update flake.lock
Opened
#2722 [PR #2549] [MERGED] integration: remove failing resolvconf tests
Opened
#2723 [PR #2550] [MERGED] auth: ensure that routes are autoapproved when the node is stored
Opened
#2724 [PR #2551] [MERGED] cli/nodes: filter nodes without any routes
Opened
#2725 [PR #2553] [MERGED] cmd: add policy check command
Opened
#2726 [PR #2552] [MERGED] policy/v2: validate autogroup:interet only in dst
Opened
#2727 [PR #2554] [MERGED] Update source.md
Opened
#2728 [PR #2556] [MERGED] policy/matcher: fix bug using contains instead of overlap
Opened
#2729 [PR #2555] [MERGED] Make more granular SSH tests for both Policies
Opened
#2730 [PR #2557] [CLOSED] replace encoding/json with faster go-json
Opened
#2731 [PR #2559] [MERGED] go.mod: update rest of deps
Opened
#2732 [PR #2558] [MERGED] Fix goreleaser deprecation warnings
Opened
#2733 [PR #2560] [MERGED] [docs] Add quotes to docker run command to prevent word splitting
Opened
#2734 [PR #2561] [MERGED] policy: reduce routes sent to peers based on packetfilter
Opened
#2735 [PR #2562] [MERGED] Misc doc fixes
Opened
#2736 [PR #2566] [MERGED] app: throw away not found body
Opened
#2737 [PR #2563] [CLOSED] flake: fix vendorHash
Opened
#2738 [PR #2569] [MERGED] Remove subnet router visibility workaround from docs
Opened
#2739 [PR #2572] [MERGED] feat: add autogroup:member, autogroup:tagged
Opened
#2740 [PR #2575] [MERGED] Replace magic-nix-cache-action
Opened
#2741 [PR #2576] [MERGED] policy/v2: validate that no undefined group or tag is used
Opened
#2742 [PR #2578] [MERGED] policy/v2: separate exit node and 0.0.0.0/0 routes
Opened
#2743 [PR #2579] [MERGED] bring back last_seen in database
Opened
#2744 [PR #2580] [MERGED] cli: policy check, dont require config or log
Opened
#2745 [PR #2581] [MERGED] Add migration steps when policy is stored in the database
Opened
#2746 [PR #2582] [MERGED] Simplify policy migration
Opened
#2747 [PR #2585] [MERGED] Update flake.lock
Opened
#2748 [PR #2587] [CLOSED] Update code to not risk normalization that changes existing keys
Opened
#2749 [PR #2588] [MERGED] fix: change FormatUint base from 64 to 10 in preauthkeys list command
Opened
#2750 [PR #2591] [MERGED] Do not ignore config-example.yml, HEADSCALE_CONFIG, document breaking change
Opened
#2751 [PR #2590] [MERGED] Remove map_legacy_users from example configuration
Opened
#2752 [PR #2593] [MERGED] users: harden, test, and add cleaner of identifier
Opened
#2753 [PR #2594] [MERGED] changelog: entry for 0.26
Opened
#2754 [PR #2592] [CLOSED] mapper: make online non-ptr
Opened
#2755 [PR #2595] [MERGED] goreleaser: always do draft
Opened
#2756 [PR #2596] [MERGED] allow overriding remote derp map
Opened
#2757 [PR #2600] [MERGED] policy: remove v1 code
Opened
#2758 [PR #2606] [MERGED] policy/v2: error on missing or zero port
Opened
#2759 [PR #2604] [CLOSED] handling a nil panic pointer causing a node to be removed
Opened
#2760 [PR #2607] [MERGED] web: change node registration parameter order
Opened
#2761 [PR #2609] [MERGED] Fix typo in TailSQL log
Opened
#2762 [PR #2611] [CLOSED] feat(oidc): allow email prefix as username fallback
Opened
#2763 [PR #2614] [MERGED] Refactor Debian/Ubuntu packaging
Opened
#2764 [PR #2617] [MERGED] db: add sqlite "source of truth" schema
Opened
#2765 [PR #2619] [CLOSED] Tags: reimplement, make first class
Opened
#2766 [PR #2620] [MERGED] Add headscale-console web UI to docs
Opened
#2767 [PR #2621] [MERGED] support force flag for nodes backfillips
Opened
#2768 [PR #2625] [MERGED] Refactor OpenID Connect documentation
Opened
#2769 [PR #2624] [MERGED] feat(tools): Add Go client implementation
Opened
#2770 [PR #2632] [CLOSED] 0xlilim patch 4
Opened
#2771 [PR #2633] [CLOSED] Fix: Populate user name from email prefix if OIDC username is invalid
Opened
#2772 [PR #2635] [MERGED] Ensure that a username starts with a letter
Opened
#2773 [PR #2636] Standardize user identification flags across CLI commands - fix for #2631
Opened
#2774 [PR #2628] [MERGED] mapper: produce map before poll
Opened
#2775 [PR #2639] [MERGED] state: introduction
Opened
#2776 [PR #2640] [MERGED] Correctly document the default for dns.override_local_dns
Opened
#2777 [PR #2642] [MERGED] Fix /machine/map endpoint vulnerability
Opened
#2778 [PR #2643] [MERGED] feat: add robots.txt
Opened
#2779 [PR #2644] [MERGED] Fixed typo in parseCapabilityVersion, and removed unused error
Opened
#2780 [PR #2648] [MERGED] cmd/hi: add integration test runner CLI tool
Opened
#2781 [PR #2647] [CLOSED] cmd/headscale: migrate CLI from Cobra to command
Opened
#2782 [PR #2649] [MERGED] cmd/hi: fixes and qol
Opened
#2783 [PR #2653] [MERGED] hscontrol: remove go-grpc-middleware v1 dependency
Opened
#2784 [PR #2654] [MERGED] ci: fix golangci-lint flag for v2 compatibility
Opened
#2785 [PR #2656] [MERGED] don't crash if config file is missing
Opened
#2786 [PR #2658] [MERGED] remove unneeded check
Opened
#2787 [PR #2659] [MERGED] add health command
Opened
#2788 [PR #2661] [MERGED] Clarify SIGHUP log message
Opened
#2789 [PR #2663] [MERGED] OIDC: Query userinfo endpoint before verifying user
Opened
#2790 [PR #2669] [MERGED] Update flake.lock
Opened
#2791 [PR #2664] [CLOSED] build(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0
Opened
#2792 [PR #2671] [MERGED] all: use immutable node view in read path
Opened
#2793 [PR #2673] [CLOSED] docs: add section for example configurations
Opened
#2794 [PR #2670] [MERGED] Node store
Opened
#2795 [PR #2675] [MERGED] .github/workflows: reduce integration retry to 3
Opened
#2796 [PR #2677] [MERGED] Fix HA subnet routers from #2639
Opened
#2797 [PR #2679] [CLOSED] fix: prevent single node timeout from blocking all other updates
Opened
#2798 [PR #2684] [MERGED] Fix config param name in TLS doc
Opened
#2799 [PR #2680] [MERGED] integration: replace time.Sleep with assert.EventuallyWithT
Opened
#2800 [PR #2685] [MERGED] Use more Eventually in tests
Opened
#2801 [PR #2686] [CLOSED] cmd/hi: prevent concurrent runs and add force flag
Opened
#2802 [PR #2689] [MERGED] integration: run headscale with delve and debug symbols
Opened
#2803 [PR #2690] [MERGED] Fix command in bug report template
Opened
#2804 [PR #2687] [CLOSED] cli expermient3
Opened
#2805 [PR #2691] [MERGED] The preauthkeys commands expect a user id instead of a username
Opened
#2806 [PR #2696] Implement tailscale cert PoC
Opened
#2807 [PR #2692] [MERGED] all: remove 32 bit support
Opened
#2808 [PR #2699] [MERGED] Update flake.lock
Opened
#2809 [PR #2700] [MERGED] Fix typos
Opened
#2810 [PR #2701] [MERGED] Add debug and troubleshooting documentation
Opened
#2811 [PR #2703] [MERGED] Fix invocation of golangci-lint
Opened
#2812 [PR #2706] [CLOSED] integration: add some godoc
Opened
#2813 [PR #2704] Feature/planetexpress/OIDC refresh tokens
Opened
#2814 [PR #2707] [MERGED] docs: fix typos
Opened
#2815 [PR #2712] [CLOSED] integration: expand cli test coverage
Opened
#2816 [PR #2709] build(deps): bump github.com/docker/docker from 28.2.2+incompatible to 28.3.3+incompatible
Opened
#2817 [PR #2716] [CLOSED] deps: upgrade
Opened
#2818 [PR #2724] feat: Add magicdns_peer_aaaa config option
Opened
#2819 [PR #2718] [MERGED] docs: connect Android using a preauthkey
Opened
#2820 [PR #2726] [MERGED] Document ports in use
Opened
#2821 [PR #2727] [MERGED] Fix fatal error on missing config file
Opened
#2822 [PR #2730] [MERGED] Log registrationID to simplify interactive node registration
Opened
#2823 [PR #2733] [MERGED] Fix CHANGELOG for autogroup:member and autogroup:tagged
Opened
#2824 [PR #2732] [MERGED] Add DERP documentation
Opened
#2825 [PR #2735] [MERGED] Fix Internal server error on /verify
Opened
#2826 [PR #2734] [MERGED] Allow all traffic if acls field is omited from the policy
Opened
#2827 [PR #2737] [MERGED] Enable derp.server.verify_clients by default
Opened
#2828 [PR #2741] [MERGED] derp: increase update frequency and harden on failures
Opened
#2829 [PR #2739] [CLOSED] Fixed Internal server error on /debug/registration-cache
Opened
#2830 [PR #2742] build(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.4.0
Opened
#2831 [PR #2744] [MERGED] Refresh OIDC documentation for recent updates
Opened
#2832 [PR #2745] [MERGED] Refactor to use reflect.TypeFor
Opened
#2833 [PR #2747] [MERGED] Describe how to remove a DERP region
Opened
#2834 [PR #2746] [MERGED] Update tools.md
Opened
#2835 [PR #2748] [MERGED] bunch of qol
Opened
#2836 [PR #2752] [CLOSED] fix: return valid AuthUrl in followup request on expired reg id
Opened
#2837 [PR #2756] [CLOSED] <fix> Convert the derpmap parsing from yaml to json to ensure compati…
Opened
#2838 [PR #2755] [MERGED] Update flake.lock
Opened
#2839 [PR #2758] [MERGED] Minor documentation correction
Opened
#2840 [PR #2759] [CLOSED] work on #2731
Opened
#2841 [PR #2760] [CLOSED] fix: node list-routes output formatting
Opened
#2842 [PR #2763] [MERGED] poll: add missing godoc
Opened
#2843 [PR #2761] [MERGED] .github/ISSUE_TEMPLATE: add node number to environment
Opened
#2844 [PR #2764] [MERGED] policy: reject unsupported fields
Opened
#2845 [PR #2765] [MERGED] cmd: add option to get and set policy directly from database
Opened
#2846 [PR #2766] [MERGED] policy: validate error message for asterix in ssh
Opened
#2847 [PR #2767] [MERGED] {policy, node}: allow return paths in route reduction
Opened
#2848 [PR #2768] [MERGED] policy: fix ssh usermap, fixing autogroup:nonroot
Opened
#2849 [PR #2769] [MERGED] app: fix sigint hanging
Opened
#2850 [PR #2770] [MERGED] cli: use gobuild version handling
Opened
#2851 [PR #2772] [MERGED] derp: fix flaky shuffle test
Opened
#2852 [PR #2773] [MERGED] fix: return valid AuthUrl in followup request on expired reg id
Opened
#2853 [PR #2774] [MERGED] capver: update latest
Opened
#2854 [PR #2775] [MERGED] mapper: send change instead of full update
Opened
#2855 [PR #2776] [MERGED] Document how to recover from a policy error in the database
Opened
#2856 [PR #2779] [MERGED] flake: goreleaser doesnt follow go nix convention
Opened
#2857 [PR #2778] [MERGED] Add FAQ entry about the recommended upgrade path
Opened
#2858 [PR #2783] [MERGED] Update flake.lock
Opened
#2859 [PR #2781] [MERGED] stability and race conditions in auth and node store
Opened
#2860 [PR #2786] [MERGED] Update official.md
Opened
#2861 [PR #2795] [MERGED] The sequential prefix allocation uses a best-effort approach
Opened
#2862 [PR #2789] [MERGED] feat: add autogroup:self
Opened
#2863 [PR #2798] [MERGED] update dependencies
Opened
#2864 [PR #2797] [MERGED] changelog: prepare for 0.27.0
Opened
#2865 [PR #2799] [MERGED] integration: eventually fixups
Opened
#2866 [PR #2801] [MERGED] Add healthcheck to container docs
Opened
#2867 [PR #2800] [MERGED] Downgrade completed broadcast message to debug
Opened
#2868 [PR #2804] Expose pending interactive registrations via admin API
Opened
#2869 [PR #2805] [MERGED] Add FAQ on how to disable log submission
Opened
#2870 [PR #2808] [MERGED] Fix autogroup:self alternative example
Opened
#2871 [PR #2806] [MERGED] Remove outdated hint about an empty config file
Opened
#2872 [PR #2807] [MERGED] policy: fix autogroup:self propagation and optimize cache invalidation
Opened
#2873 [PR #2810] [MERGED] [Fix] Headscale API Bypasses Middleware
Opened
#2874 [PR #2811] [MERGED] integration: add tests for api bypass
Opened
#2875 [PR #2813] [MERGED] cli: do not show new pre-releases on stable
Opened
#2876 [PR #2815] [MERGED] integration: reduce TestAutoApproveMultiNetwork matrix to 3 tests
Opened
#2877 [PR #2814] [MERGED] gen: test-integration
Opened
#2878 [PR #2819] [MERGED] Add API documentation
Opened
#2879 [PR #2818] [MERGED] Add creation_time and ko_data_creation_time to goreleaser.yml kos
Opened
#2880 [PR #2820] [MERGED] .goreleaser: add upgrade section
Opened
#2881 [PR #2821] [MERGED] hscontrol: add /version HTTP endpoint
Opened
#2882 [PR #2827] [MERGED] Use current stable base images for Debian and Alpine
Opened
#2883 [PR #2822] [CLOSED] debug: add /debug/http-routes endpoint
Opened
#2884 [PR #2823] [MERGED] changelog: set 0.27 date
Opened
#2885 [PR #2828] [MERGED] expire nodes with a custom timestamp
Opened
#2886 [PR #2831] [MERGED] remove unused ips from alloc ipset
Opened
#2887 [PR #2832] [MERGED] templates: migrate OIDC callback to elem-go, give an overhaul
Opened
#2888 [PR #2843] [MERGED] db: ignore _litestream tables when validating
Opened
#2889 [PR #2842] [MERGED] chore: fix autogroup:self with other acl rules
Opened
#2890 [PR #2844] [MERGED] db: remove all old, unused tables
Opened
#2891 [PR #2848] [MERGED] Fix flaky TestShuffleDERPMapDeterministic by ensuring deterministic map iteration
Opened
#2892 [PR #2849] [CLOSED] Add TestPingAllByIPRandomClientPort to validate direct connections with randomize_client_port
Opened
#2893 [PR #2850] [CLOSED] Filter exit node visibility through ACL policy
Opened
#2894 [PR #2851] [CLOSED] Fix Domain() to return BaseDomain instead of ServerURL hostname
Opened
#2895 [PR #2854] [MERGED] cli: only validate bypass-grpc set policy
Opened
#2896 [PR #2852] [CLOSED] Fix exit node visibility - enforce autogroup:internet ACL requirement
Opened
#2897 [PR #2853] [MERGED] types: make pre auth key use bcrypt
Opened
#2898 [PR #2856] [MERGED] send endpoint and derp only updates.
Opened
#2899 [PR #2855] [MERGED] types: Distinguish subnet and exit node access
Opened
#2900 [PR #2857] [MERGED] nix: add NixOS module and tests
Opened
#2901 [PR #2858] [MERGED] Add Favicon to web pages
Opened
#2902 [PR #2859] [MERGED] state: allow expired auth keys for node re-registration
Opened
#2903 [PR #2861] [MERGED] fix: make state cookies valid when client uses multiple login URLs
Opened
#2904 [PR #2860] [MERGED] Configurable email_verified OIDC Claim Requirement
Opened
#2905 [PR #2864] build(deps): bump github.com/opencontainers/runc from 1.3.2 to 1.3.3
Opened
#2906 [PR #2872] [MERGED] db: add defensive removal of old indices
Opened
#2907 [PR #2865] [MERGED] Document how to restrict access to exit nodes per user/group
Opened
#2908 [PR #2873] [MERGED] db: add comment about removing migrations
Opened
#2909 [PR #2874] [MERGED] policy: fix issue where non existent user results in empty ssh pol
Opened
#2910 [PR #2875] [MERGED] {state,db}: preserve node expiry on MapRequest updates
Opened
#2911 [PR #2878] [MERGED] changelog: prepare for 0.27.1
Opened
#2912 [PR #2877] [MERGED] add pre-commit hooks, move claude to agents.
Opened
#2913 [PR #2880] [MERGED] Explicitly drop apt-get clean and use dist-clean
Opened
#2914 [PR #2879] [MERGED] prettier: use standard config for all files including changelog
Opened
#2915 [PR #2881] [MERGED] cmd/hi: improve test cleanup to reduce CI disk usage
Opened
#2916 [PR #2882] [MERGED] chore: fix filterHash to work with autogroup:self in the acls
Opened
#2917 [PR #2884] [MERGED] db: remove _schema from migration tests
Opened
#2918 [PR #2885] [MERGED] make tags first class node owner
Opened
#2919 [PR #2883] [MERGED] hscontrol/db: add init schema, drop pre-0.25 support
Opened
#2920 [PR #2886] [MERGED] hscontrol/state: make NodeStore batch configuration tunable
Opened
#2921 [PR #2889] [MERGED] Containers should be read-only
Opened
#2922 [PR #2890] [MERGED] hscontrol/oidc: fix ACL policy not applied to new OIDC nodes
Opened
#2923 [PR #2894] [MERGED] [Docs] Clarify OIDC "scope" setting for Entra
Opened
#2924 [PR #2892] Wireguard only peers
Opened
#2925 [PR #2895] preauthkeys: add support expiry by key id
Opened
#2926 [PR #2897] [MERGED] Add docs about how to communicate with the service as non headscale local user
Opened
#2927 [PR #2900] [MERGED] Remove duplicated docs and use /health
Opened
#2928 [PR #2906] build(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0
Opened
#2929 [PR #2908] [CLOSED] Fixes #2907 for usedIPs for ephemeral nodes
Opened
#2930 [PR #2914] [MERGED] Added a check for empty MetricAddr before listening
Opened
#2931 [PR #2915] [MERGED] Misc docs related fixes
Opened
#2932 [PR #2913] [MERGED] docs: Enable automatic theme switching
Opened
#2933 [PR #2917] [MERGED] auth: ensure machines are allowed in when pak change
Opened
#2934 [PR #2916] [CLOSED] Tailcfg.ping request #2902
Opened
#2935 [PR #2919] [MERGED] cmd/hi: reject if we are already running
Opened
#2936 [PR #2921] [MERGED] generate: add new patches
Opened
#2937 [PR #2920] [MERGED] modernize: run gopls modernize to bring up to 1.25
Opened
#2938 [PR #2922] [MERGED] cli: remove node move command
Opened
#2939 [PR #2928] [MERGED] fixes from 0.27.2
Opened
#2940 [PR #2930] [MERGED] policy: allow tags to own tags
Opened
#2941 [PR #2932] feat: add DERPHomeParams settings
Opened
#2942 [PR #2933] [MERGED] hscontrol: log acme/autocert errors
Opened
#2943 [PR #2931] [MERGED] tags: process tags on registration, simplify policy
Opened
#2944 [PR #2936] [CLOSED] fix: compilation error in auth_test.go - CreatePreAuthKey expects pointer
Opened
#2945 [PR #2937] feat: minimal Docker Desktop fix - API version 1.44
Opened
#2946 [PR #2938] feat(mapper): add SendDirectUpdate method for direct MapResponse delivery
Opened
#2947 [PR #2940] [CLOSED] feat: add ping scheduler for node liveness checks
Opened
#2948 [PR #2941] [CLOSED] feat: add PingNode RPC protobuf definitions
Opened
#2949 [PR #2939] feat(ping): add core PingRequest/Response implementation
Opened
#2950 [PR #2942] [CLOSED] feat: implement PingNode gRPC handler
Opened
#2951 [PR #2944] [MERGED] Use debian13 distroless images
Opened
#2952 [PR #2945] [MERGED] docs(tools): Add tailscale-exporter
Opened
#2953 [PR #2943] [CLOSED] feat: add ping CLI command and integration tests
Opened
#2954 [PR #2946] [MERGED] golangci-lint: use forbidigo to block time.Sleep
Opened
#2955 [PR #2948] [MERGED] Use lists for integration docs
Opened
#2956 [PR #2949] feat: Disable key expiry for nodes
Opened
#2957 [PR #2950] [MERGED] mapper: move tail node conversion to node type
Opened
#2958 [PR #2952] [MERGED] all: remove deadcode
Opened
#2959 [PR #2951] [MERGED] cli: better formatting of lists
Opened
#2960 [PR #2953] [MERGED] fix: list-routes command now respects identifier filter with JSON output
Opened
#2961 [PR #2954] [MERGED] .github/workflows: prebuilt integration test artifacts
Opened
#2962 [PR #2955] [MERGED] types: add option to disable taildrop, improve tests
Opened
#2963 [PR #2956] [MERGED] capver: generate for 1.92
Opened
#2964 [PR #2957] [MERGED] batcher: fix closed panic
Opened
#2965 [PR #2959] fix: DNS resolver config respects MagicDNS superseding override_local_dns
Opened
#2966 [PR #2958] go.mod: move go tooling from flake
Opened
#2967 [PR #2960] [MERGED] split TestAutoApproveMultiNetwork
Opened
#2968 [PR #2963] [CLOSED] integration: validate that #2615 is not happening anymore
Opened
#2969 [PR #2961] [MERGED] tags: ensure tag changes propagate
Opened
#2970 [PR #2964] [MERGED] batcher: ensure removal from batcher
Opened
#2971 [PR #2968] [MERGED] Legacy preauthkeys must be used as-is
Opened
#2972 [PR #2966] [CLOSED] V0.27.1.skitz0
Opened
#2973 [PR #2969] [MERGED] changelog: prepare for 0.28.0 beta
Opened
#2974 [PR #2975] Documentation updates for 0.28.0
Opened
#2975 [PR #2976] hostname: normalize before validation
Opened
#2976 [PR #2980] [MERGED] Add headscale-operator
Opened
#2977 [PR #2984] [MERGED] sqliteconfig: add config opt for tx locking
Opened
#2978 [PR #2982] feat(web): add static file serving