Compare commits
1 commit
Author | SHA1 | Date | |
---|---|---|---|
Tobias Brunner | 6c237d280f |
155
headscale/all-in-one.yaml
Normal file
155
headscale/all-in-one.yaml
Normal file
|
@ -0,0 +1,155 @@
|
|||
apiVersion: v1
|
||||
data:
|
||||
ephemeral_node_inactivity_timeout: 30m
|
||||
listen_addr: 0.0.0.0:8080
|
||||
server_url: https://headscale.tbrnt.ch
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: headscale-config
|
||||
namespace: headscale
|
||||
---
|
||||
apiVersion: v1
|
||||
data:
|
||||
config.json: '{}'
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: headscale-etc
|
||||
namespace: headscale
|
||||
---
|
||||
apiVersion: v1
|
||||
data:
|
||||
contact-email: tobias@tobru.ch
|
||||
derp.yaml: |
|
||||
{"Regions":{"1":{"RegionID":1,"RegionCode":"nyc","RegionName":"New York City","Nodes":[{"Name":"1a","RegionID":1,"HostName":"derp1.tailscale.com","IPv4":"159.89.225.99","IPv6":"2604:a880:400:d1::828:b001"},{"Name":"1b","RegionID":1,"HostName":"derp1b.tailscale.com","IPv4":"45.55.35.93","IPv6":"2604:a880:800:a1::f:2001"}]},"10":{"RegionID":10,"RegionCode":"sea","RegionName":"Seattle","Nodes":[{"Name":"10a","RegionID":10,"HostName":"derp10.tailscale.com","IPv4":"137.220.36.168","IPv6":"2001:19f0:8001:2d9:5400:2ff:feef:bbb1"}]},"11":{"RegionID":11,"RegionCode":"sao","RegionName":"São Paulo","Nodes":[{"Name":"11a","RegionID":11,"HostName":"derp11.tailscale.com","IPv4":"18.230.97.74","IPv6":"2600:1f1e:ee4:5611:ec5c:1736:d43b:a454"}]},"12":{"RegionID":12,"RegionCode":"ord","RegionName":"Chicago","Nodes":[{"Name":"12a","RegionID":12,"HostName":"derp12.tailscale.com","IPv4":"216.128.144.130","IPv6":"2001:19f0:5c01:289:5400:3ff:fe8d:cb5e"},{"Name":"12b","RegionID":12,"HostName":"derp12b.tailscale.com","IPv4":"45.63.71.144","IPv6":"2001:19f0:5c01:48a:5400:3ff:fe8d:cb5f"},{"Name":"12c","RegionID":12,"HostName":"derp12c.tailscale.com","IPv4":"149.28.119.105","IPv6":"2001:19f0:5c01:2cb:5400:3ff:fe8d:cb60"}]},"2":{"RegionID":2,"RegionCode":"sfo","RegionName":"San Francisco","Nodes":[{"Name":"2a","RegionID":2,"HostName":"derp2.tailscale.com","IPv4":"167.172.206.31","IPv6":"2604:a880:2:d1::c5:7001"},{"Name":"2b","RegionID":2,"HostName":"derp2b.tailscale.com","IPv4":"64.227.106.23","IPv6":"2604:a880:4:1d0::29:9000"}]},"3":{"RegionID":3,"RegionCode":"sin","RegionName":"Singapore","Nodes":[{"Name":"3a","RegionID":3,"HostName":"derp3.tailscale.com","IPv4":"68.183.179.66","IPv6":"2400:6180:0:d1::67d:8001"}]},"4":{"RegionID":4,"RegionCode":"fra","RegionName":"Frankfurt","Nodes":[{"Name":"4c","RegionID":4,"HostName":"derp4c.tailscale.com","IPv4":"134.122.77.138","IPv6":"2a03:b0c0:3:d0::1501:6001"},{"Name":"4d","RegionID":4,"HostName":"derp4d.tailscale.com","IPv4":"134.122.94.167","IPv6":"2a03:b0c0:3:d0::1501:b001"},{"Name":"4e","RegionID":4,"HostName":"derp4e.tailscale.com","IPv4":"134.122.74.153","IPv6":"2a03:b0c0:3:d0::29:9001"}]},"5":{"RegionID":5,"RegionCode":"syd","RegionName":"Sydney","Nodes":[{"Name":"5a","RegionID":5,"HostName":"derp5.tailscale.com","IPv4":"103.43.75.49","IPv6":"2001:19f0:5801:10b7:5400:2ff:feaa:284c"}]},"6":{"RegionID":6,"RegionCode":"blr","RegionName":"Bangalore","Nodes":[{"Name":"6a","RegionID":6,"HostName":"derp6.tailscale.com","IPv4":"68.183.90.120","IPv6":"2400:6180:100:d0::982:d001"}]},"7":{"RegionID":7,"RegionCode":"tok","RegionName":"Tokyo","Nodes":[{"Name":"7a","RegionID":7,"HostName":"derp7.tailscale.com","IPv4":"167.179.89.145","IPv6":"2401:c080:1000:467f:5400:2ff:feee:22aa"}]},"8":{"RegionID":8,"RegionCode":"lhr","RegionName":"London","Nodes":[{"Name":"8b","RegionID":8,"HostName":"derp8b.tailscale.com","IPv4":"46.101.74.201","IPv6":"2a03:b0c0:1:d0::ec1:e001"},{"Name":"8c","RegionID":8,"HostName":"derp8c.tailscale.com","IPv4":"206.189.16.32","IPv6":"2a03:b0c0:1:d0::e1f:4001"},{"Name":"8d","RegionID":8,"HostName":"derp8d.tailscale.com","IPv4":"178.62.44.132","IPv6":"2a03:b0c0:1:d0::e08:e001"}]},"9":{"RegionID":9,"RegionCode":"dfw","RegionName":"Dallas","Nodes":[{"Name":"9a","RegionID":9,"HostName":"derp9.tailscale.com","IPv4":"207.148.3.137","IPv6":"2001:19f0:6401:1d9c:5400:2ff:feef:bb82"},{"Name":"9b","RegionID":9,"HostName":"derp9b.tailscale.com","IPv4":"144.202.67.195","IPv6":"2001:19f0:6401:eb5:5400:3ff:fe8d:6d9b"},{"Name":"9c","RegionID":9,"HostName":"derp9c.tailscale.com","IPv4":"155.138.243.219","IPv6":"2001:19f0:6401:fe7:5400:3ff:fe8d:6d9c"}]}}}
|
||||
public-hostname: headscale.tbrnt.ch
|
||||
public-proto: https
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: headscale-site
|
||||
namespace: headscale
|
||||
---
|
||||
apiVersion: v1
|
||||
data:
|
||||
private-key: QU1tUkdzNEdqSDlkbitUU244cWUrU29nYmhmQ0Q4ZytmdXVZY2FOL2oxND0K
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: headscale
|
||||
namespace: headscale
|
||||
type: Opaque
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
labels:
|
||||
app: headscale
|
||||
name: headscale
|
||||
namespace: headscale
|
||||
spec:
|
||||
ports:
|
||||
- name: http
|
||||
port: 8080
|
||||
targetPort: http
|
||||
selector:
|
||||
app: headscale
|
||||
---
|
||||
apiVersion: apps/v1
|
||||
kind: StatefulSet
|
||||
metadata:
|
||||
name: headscale
|
||||
namespace: headscale
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app: headscale
|
||||
serviceName: headscale
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: headscale
|
||||
spec:
|
||||
containers:
|
||||
- command:
|
||||
- /go/bin/headscale
|
||||
- serve
|
||||
env:
|
||||
- name: SERVER_URL
|
||||
value: https://headscale.tbrnt.ch
|
||||
- name: LISTEN_ADDR
|
||||
valueFrom:
|
||||
configMapKeyRef:
|
||||
key: listen_addr
|
||||
name: headscale-config
|
||||
- name: DERP_MAP_PATH
|
||||
value: /vol/config/derp.yaml
|
||||
- name: EPHEMERAL_NODE_INACTIVITY_TIMEOUT
|
||||
valueFrom:
|
||||
configMapKeyRef:
|
||||
key: ephemeral_node_inactivity_timeout
|
||||
name: headscale-config
|
||||
- name: DB_TYPE
|
||||
value: sqlite3
|
||||
- name: DB_PATH
|
||||
value: /vol/data/db.sqlite
|
||||
image: headscale:latest
|
||||
imagePullPolicy: IfNotPresent
|
||||
livenessProbe:
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 15
|
||||
tcpSocket:
|
||||
port: http
|
||||
timeoutSeconds: 5
|
||||
name: headscale
|
||||
ports:
|
||||
- containerPort: 8080
|
||||
name: http
|
||||
protocol: TCP
|
||||
volumeMounts:
|
||||
- mountPath: /vol/config
|
||||
name: config
|
||||
- mountPath: /vol/data
|
||||
name: data
|
||||
- mountPath: /vol/secret
|
||||
name: secret
|
||||
- mountPath: /etc/headscale
|
||||
name: etc
|
||||
volumes:
|
||||
- configMap:
|
||||
name: headscale-site
|
||||
name: config
|
||||
- configMap:
|
||||
name: headscale-etc
|
||||
name: etc
|
||||
- name: secret
|
||||
secret:
|
||||
secretName: headscale
|
||||
volumeClaimTemplates:
|
||||
- metadata:
|
||||
name: data
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
resources:
|
||||
requests:
|
||||
storage: 1Gi
|
||||
storageClassName: local-path
|
||||
---
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
annotations:
|
||||
kubernetes.io/ingress.class: traefik
|
||||
name: headscale
|
||||
namespace: headscale
|
||||
spec:
|
||||
rules:
|
||||
- host: headscale.tbrnt.ch
|
||||
http:
|
||||
paths:
|
||||
- backend:
|
||||
service:
|
||||
name: headscale
|
||||
port:
|
||||
number: 8080
|
||||
path: /
|
||||
pathType: Prefix
|
Reference in a new issue