ansible/roles/headscale/defaults/main.yml

66 lines
2.3 KiB
YAML

# Who will run the headscale docker stack? Needs to be present and be in docker group.
headscale_user: headscale
headscale_group: headscale
# Enable automatic updates with watchtower
headscale_watchtower_enable: true
# Headscale's base directory for configs, data, etc.
headscale_server_base_dir: /etc/headscale
# Data and Config directories, inside the base dir specified above
headscale_server_config_dir: config
headscale_server_data_dir: data
headscale_server_keys_dir: keys
# Headscale's exposed port
# headscale_server_port: 27896
headscale_server_port: 8080
headscale_server_metrics_port: 9090
# Headscale UI's exposed port
headscale_web_port_http: 9480
# Config
# General (headscale container config)
# Change to your hostname or host IP
headscale_server_config_server_url: https://vpn.example.com
# Listen Addresses
headscale_server_config_listen_addr: 0.0.0.0:8080
headscale_server_config_metrics_listen_addr: 0.0.0.0:9090
# The default /var/lib/headscale path is not writable in the container
headscale_server_config_private_key_path: /keys/private.key
# The default /var/lib/headscale path is not writable in the container
headscale_server_config_noise_private_key_path: /keys/noise_private.key
# The default /var/lib/headscale path is not writable in the container
headscale_server_config_db_type: sqlite3
headscale_server_config_db_path: /data/db.sqlite
# headscale_server_config_grpc_listen_addr: 127.0.0.1:50443
# headscale_server_config_grpc_allow_insecure: false
# IP Prefixes
# headscale_server_config_ip_prefixes:
# - ''
headscale_server_config_disable_check_updates: false
# headscale_server_config_ephemeral_node_inactivity_timeout: 30m
# Derp
# headscale_server_config_derp_server_enabled: false
# headscale_server_config_derp_server_region_id: 999
# headscale_server_config_derp_server_region_code: "headscale"
# headscale_server_config_derp_server_region_name: "Headscale Embedded DERP"
# headscale_server_config_derp_server_stun_listen_addr: "0.0.0.0:3478"
# headscale_server_config_derp_server_private_key_path: /var/lib/headscale/derp_server_private.key
# headscale_server_config_derp_urls:
# - https://controlplane.tailscale.com/derpmap/default
# headscale_server_config_derp_paths: []
# headscale_server_config_derp_auto_update_enabled: true
# headscale_server_config_derp_update_frequency: 24h
# to be continued if necessary