[Feature] tailscale cert #793

Open
opened 2025-12-29 02:24:06 +01:00 by adam · 3 comments
Owner

Originally created by @Integral-Tech on GitHub (Sep 16, 2024).

Use case

The Official Tailscale documentaion introduces how to enable HTTPS and use tailscale cert to obtain an SSL certificate. However, it seems that this feature hasn't been supported by Headscale.

Description

Add tailscale cert feature for Headscale

Contribution

  • I can write the design doc for this feature
  • I can contribute this feature

How can it be implemented?

No response

Originally created by @Integral-Tech on GitHub (Sep 16, 2024). ### Use case [The Official Tailscale documentaion](https://tailscale.com/kb/1153/enabling-https) introduces how to enable HTTPS and use ```tailscale cert``` to obtain an SSL certificate. However, it seems that this feature hasn't been supported by Headscale. ### Description Add ```tailscale cert``` feature for Headscale ### Contribution - [ ] I can write the design doc for this feature - [ ] I can contribute this feature ### How can it be implemented? _No response_
adam added the enhancementno-stale-bot labels 2025-12-29 02:24:06 +01:00
Author
Owner

@Permanently commented on GitHub (Oct 10, 2024):

I wish I found this submission before spending the last couple of hours hacking at the TLS settings in an attempt to get that command working. I was under the assumption the TLS configuration was for this command, and that me reverse-proxying Headscale through NGINX was messing it up. :|

Edit: also just realised this is a duplicate of #1921

@Permanently commented on GitHub (Oct 10, 2024): I wish I found this submission before spending the last couple of hours hacking at the TLS settings in an attempt to get that command working. I was under the assumption the TLS configuration was for this command, and that me reverse-proxying Headscale through NGINX was messing it up. :| **Edit:** also just realised this is a duplicate of #1921
Author
Owner

@github-actions[bot] commented on GitHub (Jan 9, 2025):

This issue is stale because it has been open for 90 days with no activity.

@github-actions[bot] commented on GitHub (Jan 9, 2025): This issue is stale because it has been open for 90 days with no activity.
Author
Owner

@pwall2222 commented on GitHub (Apr 11, 2025):

It would be needed to implement the /machine/set-dns to set the TXT record required for the ACME (LetsEncrypt) challenge.

@pwall2222 commented on GitHub (Apr 11, 2025): It would be needed to implement the [`/machine/set-dns`](https://github.com/tailscale/tailscale/blob/11d1dd2aed2a34e151bfd598d4944f778c7af149/control/controlclient/direct.go#L1504) to set the `TXT` record required for the ACME (LetsEncrypt) challenge.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/headscale#793