install headscale

2022-01-09 20:27:44 +01:00 · 2022-01-09 20:27:44 +01:00 · 6c237d280f
parent 642ba34214
commit 6c237d280f
1 changed files with 155 additions and 0 deletions
--- a/headscale/all-in-one.yaml
+++ b/headscale/all-in-one.yaml
@ -0,0 +1,155 @@
+apiVersion: v1
+data:
+  ephemeral_node_inactivity_timeout: 30m
+  listen_addr: 0.0.0.0:8080
+  server_url: https://headscale.tbrnt.ch
+kind: ConfigMap
+metadata:
+  name: headscale-config
+  namespace: headscale
+---
+apiVersion: v1
+data:
+  config.json: '{}'
+kind: ConfigMap
+metadata:
+  name: headscale-etc
+  namespace: headscale
+---
+apiVersion: v1
+data:
+  contact-email: tobias@tobru.ch
+  derp.yaml: |
+    {"Regions":{"1":{"RegionID":1,"RegionCode":"nyc","RegionName":"New York City","Nodes":[{"Name":"1a","RegionID":1,"HostName":"derp1.tailscale.com","IPv4":"159.89.225.99","IPv6":"2604:a880:400:d1::828:b001"},{"Name":"1b","RegionID":1,"HostName":"derp1b.tailscale.com","IPv4":"45.55.35.93","IPv6":"2604:a880:800:a1::f:2001"}]},"10":{"RegionID":10,"RegionCode":"sea","RegionName":"Seattle","Nodes":[{"Name":"10a","RegionID":10,"HostName":"derp10.tailscale.com","IPv4":"137.220.36.168","IPv6":"2001:19f0:8001:2d9:5400:2ff:feef:bbb1"}]},"11":{"RegionID":11,"RegionCode":"sao","RegionName":"São Paulo","Nodes":[{"Name":"11a","RegionID":11,"HostName":"derp11.tailscale.com","IPv4":"18.230.97.74","IPv6":"2600:1f1e:ee4:5611:ec5c:1736:d43b:a454"}]},"12":{"RegionID":12,"RegionCode":"ord","RegionName":"Chicago","Nodes":[{"Name":"12a","RegionID":12,"HostName":"derp12.tailscale.com","IPv4":"216.128.144.130","IPv6":"2001:19f0:5c01:289:5400:3ff:fe8d:cb5e"},{"Name":"12b","RegionID":12,"HostName":"derp12b.tailscale.com","IPv4":"45.63.71.144","IPv6":"2001:19f0:5c01:48a:5400:3ff:fe8d:cb5f"},{"Name":"12c","RegionID":12,"HostName":"derp12c.tailscale.com","IPv4":"149.28.119.105","IPv6":"2001:19f0:5c01:2cb:5400:3ff:fe8d:cb60"}]},"2":{"RegionID":2,"RegionCode":"sfo","RegionName":"San Francisco","Nodes":[{"Name":"2a","RegionID":2,"HostName":"derp2.tailscale.com","IPv4":"167.172.206.31","IPv6":"2604:a880:2:d1::c5:7001"},{"Name":"2b","RegionID":2,"HostName":"derp2b.tailscale.com","IPv4":"64.227.106.23","IPv6":"2604:a880:4:1d0::29:9000"}]},"3":{"RegionID":3,"RegionCode":"sin","RegionName":"Singapore","Nodes":[{"Name":"3a","RegionID":3,"HostName":"derp3.tailscale.com","IPv4":"68.183.179.66","IPv6":"2400:6180:0:d1::67d:8001"}]},"4":{"RegionID":4,"RegionCode":"fra","RegionName":"Frankfurt","Nodes":[{"Name":"4c","RegionID":4,"HostName":"derp4c.tailscale.com","IPv4":"134.122.77.138","IPv6":"2a03:b0c0:3:d0::1501:6001"},{"Name":"4d","RegionID":4,"HostName":"derp4d.tailscale.com","IPv4":"134.122.94.167","IPv6":"2a03:b0c0:3:d0::1501:b001"},{"Name":"4e","RegionID":4,"HostName":"derp4e.tailscale.com","IPv4":"134.122.74.153","IPv6":"2a03:b0c0:3:d0::29:9001"}]},"5":{"RegionID":5,"RegionCode":"syd","RegionName":"Sydney","Nodes":[{"Name":"5a","RegionID":5,"HostName":"derp5.tailscale.com","IPv4":"103.43.75.49","IPv6":"2001:19f0:5801:10b7:5400:2ff:feaa:284c"}]},"6":{"RegionID":6,"RegionCode":"blr","RegionName":"Bangalore","Nodes":[{"Name":"6a","RegionID":6,"HostName":"derp6.tailscale.com","IPv4":"68.183.90.120","IPv6":"2400:6180:100:d0::982:d001"}]},"7":{"RegionID":7,"RegionCode":"tok","RegionName":"Tokyo","Nodes":[{"Name":"7a","RegionID":7,"HostName":"derp7.tailscale.com","IPv4":"167.179.89.145","IPv6":"2401:c080:1000:467f:5400:2ff:feee:22aa"}]},"8":{"RegionID":8,"RegionCode":"lhr","RegionName":"London","Nodes":[{"Name":"8b","RegionID":8,"HostName":"derp8b.tailscale.com","IPv4":"46.101.74.201","IPv6":"2a03:b0c0:1:d0::ec1:e001"},{"Name":"8c","RegionID":8,"HostName":"derp8c.tailscale.com","IPv4":"206.189.16.32","IPv6":"2a03:b0c0:1:d0::e1f:4001"},{"Name":"8d","RegionID":8,"HostName":"derp8d.tailscale.com","IPv4":"178.62.44.132","IPv6":"2a03:b0c0:1:d0::e08:e001"}]},"9":{"RegionID":9,"RegionCode":"dfw","RegionName":"Dallas","Nodes":[{"Name":"9a","RegionID":9,"HostName":"derp9.tailscale.com","IPv4":"207.148.3.137","IPv6":"2001:19f0:6401:1d9c:5400:2ff:feef:bb82"},{"Name":"9b","RegionID":9,"HostName":"derp9b.tailscale.com","IPv4":"144.202.67.195","IPv6":"2001:19f0:6401:eb5:5400:3ff:fe8d:6d9b"},{"Name":"9c","RegionID":9,"HostName":"derp9c.tailscale.com","IPv4":"155.138.243.219","IPv6":"2001:19f0:6401:fe7:5400:3ff:fe8d:6d9c"}]}}}
+  public-hostname: headscale.tbrnt.ch
+  public-proto: https
+kind: ConfigMap
+metadata:
+  name: headscale-site
+  namespace: headscale
+---
+apiVersion: v1
+data:
+  private-key: QU1tUkdzNEdqSDlkbitUU244cWUrU29nYmhmQ0Q4ZytmdXVZY2FOL2oxND0K
+kind: Secret
+metadata:
+  name: headscale
+  namespace: headscale
+type: Opaque
+---
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app: headscale
+  name: headscale
+  namespace: headscale
+spec:
+  ports:
+  - name: http
+    port: 8080
+    targetPort: http
+  selector:
+    app: headscale
+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: headscale
+  namespace: headscale
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: headscale
+  serviceName: headscale
+  template:
+    metadata:
+      labels:
+        app: headscale
+    spec:
+      containers:
+      - command:
+        - /go/bin/headscale
+        - serve
+        env:
+        - name: SERVER_URL
+          value: https://headscale.tbrnt.ch
+        - name: LISTEN_ADDR
+          valueFrom:
+            configMapKeyRef:
+              key: listen_addr
+              name: headscale-config
+        - name: DERP_MAP_PATH
+          value: /vol/config/derp.yaml
+        - name: EPHEMERAL_NODE_INACTIVITY_TIMEOUT
+          valueFrom:
+            configMapKeyRef:
+              key: ephemeral_node_inactivity_timeout
+              name: headscale-config
+        - name: DB_TYPE
+          value: sqlite3
+        - name: DB_PATH
+          value: /vol/data/db.sqlite
+        image: headscale:latest
+        imagePullPolicy: IfNotPresent
+        livenessProbe:
+          initialDelaySeconds: 30
+          periodSeconds: 15
+          tcpSocket:
+            port: http
+          timeoutSeconds: 5
+        name: headscale
+        ports:
+        - containerPort: 8080
+          name: http
+          protocol: TCP
+        volumeMounts:
+        - mountPath: /vol/config
+          name: config
+        - mountPath: /vol/data
+          name: data
+        - mountPath: /vol/secret
+          name: secret
+        - mountPath: /etc/headscale
+          name: etc
+      volumes:
+      - configMap:
+          name: headscale-site
+        name: config
+      - configMap:
+          name: headscale-etc
+        name: etc
+      - name: secret
+        secret:
+          secretName: headscale
+  volumeClaimTemplates:
+  - metadata:
+      name: data
+    spec:
+      accessModes:
+      - ReadWriteOnce
+      resources:
+        requests:
+          storage: 1Gi
+      storageClassName: local-path
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    kubernetes.io/ingress.class: traefik
+  name: headscale
+  namespace: headscale
+spec:
+  rules:
+  - host: headscale.tbrnt.ch
+    http:
+      paths:
+      - backend:
+          service:
+            name: headscale
+            port:
+              number: 8080
+        path: /
+        pathType: Prefix