Fix Headscale pilot policy and healthchecks
Some checks failed
secret-guardrails / artifact-secret-scan (push) Has been cancelled
secret-guardrails / gitleaks (push) Has been cancelled

This commit is contained in:
Fizzlepoof
2026-05-26 01:18:19 +00:00
parent 12452bac64
commit e9b61ad3cd
4 changed files with 14 additions and 6 deletions

View File

@@ -28,7 +28,15 @@ Self-hosted Headscale + Headplane pilot stack for replacing the Tailscale free-t
- Headscale control plane: `http://headscale.home.paccoco.com:8084`
- Headplane UI: `http://headplane.home.paccoco.com:3005/admin`
These are intentionally LAN/private-DNS endpoints for the pilot. If you later want Traefik/Pangolin exposure, use `examples/traefik-routes.yml` as a starting point instead of changing the pilot shape first.
These are the intended LAN/private-DNS endpoints for the pilot. If you later want Traefik/Pangolin exposure, use `examples/traefik-routes.yml` as a starting point instead of changing the pilot shape first.
### Current live pilot note
The live PD pilot is currently using direct-IP URLs instead:
- Headscale: `http://10.5.30.6:8084`
- Headplane: `http://10.5.30.6:3005/admin`
Reason: the `home.paccoco.com` records for these pilot names have not yet been added in Technitium, and the current Technitium admin flow is 2FA-gated. Once those DNS records exist, flip the live stack back to the hostname-based URLs above.
## Initial users