No, I don’t think I knew there was such a thing. I’m running straight Tailscale, installed following their instructions:
When I had it joined to my previous Headscale server, NS8 was able to communicate over the Tailnet without issue after I added tailscale0 to trusted. But now that I’ve logged into the new one, no such luck.
Obviously installation on NS8 would be very different.
Thanks for the info, I’m going to check later today to hopefully provide a solution.
Well, that’s interesting. Thinking a reboot might help (bad Windows habits), I rebooted the NS8 server. After I did, Tailscale was no longer logged in. tailscale login --login-server <foo> returned a URL to connect; when I browsed to that URL, it did not use the OIDC authentication.
The settings for the headscale app hadn’t changed, but I re-saved them. After I did that, I re-ran the tailscale login command, it returned a different registration URL, and browsing there allowed me to log in via OIDC.
Moreover, once I did that, whatever firewall issue I was having appeared to be resolved:
dan@wxbox ➜ ~ tailscale ping ns8
pong from ns8 (100.64.0.11) via DERP(nyc) in 153ms
pong from ns8 (100.64.0.11) via DERP(nyc) in 53ms
pong from ns8 (100.64.0.11) via DERP(nyc) in 53ms
pong from ns8 (100.64.0.11) via DERP(nyc) in 52ms
pong from ns8 (100.64.0.11) via DERP(nyc) in 48ms
^C
My weather station is updating (saving data to a database on the NS8 box), and the backup job to my NAS now succeeds again.
I just got a new phone, which meant joining it to headscale. And despite not having changed any settings, it wasn’t using the OIDC login again. Going back to the app (v1.0.4) and re-saved the settings, and it worked again. It seems there’s something causing it to lose that configuration.
I’m not sure how helpful they’ll be, but I think these are the logs near the time I re-saved the settings:
2025-12-04T15:03:13-05:00 [1:headscale1:agent@headscale1] task/module/headscale1/d6c6d22c-f99f-4af9-bca0-cd867810e68c: get-name/50get_name is starting
2025-12-04T15:03:13-05:00 [1:headscale1:agent@headscale1] task/module/headscale1/0dd422f9-805e-42d9-b773-9fa003e01003: get-configuration/20read is starting
2025-12-04T15:03:13-05:00 [1:headscale1:agent@headscale1] task/module/headscale1/e1331044-2c70-4cab-97e6-0bd63b1daa99: get-status/20read is starting
2025-12-04T15:03:13-05:00 [1:headscale1:agent@headscale1] task/module/headscale1/0dd422f9-805e-42d9-b773-9fa003e01003: action "get-configuration" status is "completed" (0) at step validate-output.json
2025-12-04T15:03:13-05:00 [1:headscale1:agent@headscale1] task/module/headscale1/d6c6d22c-f99f-4af9-bca0-cd867810e68c: action "get-name" status is "completed" (0) at step 50get_name
2025-12-04T15:03:14-05:00 [1:headscale1:agent@headscale1] task/module/headscale1/e1331044-2c70-4cab-97e6-0bd63b1daa99: action "get-status" status is "completed" (0) at step validate-output.json
2025-12-04T15:03:17-05:00 [1:headscale1:agent@headscale1] task/module/headscale1/9be16cf9-5a1f-4b47-b8fa-0f08055ba2b4: get-configuration/20read is starting
2025-12-04T15:03:17-05:00 [1:headscale1:agent@headscale1] task/module/headscale1/9be16cf9-5a1f-4b47-b8fa-0f08055ba2b4: action "get-configuration" status is "completed" (0) at step validate-output.json
2025-12-04T15:03:25-05:00 [1:headscale1:agent@headscale1] task/module/headscale1/c6a7c1c9-2e7c-4aa7-8102-8386be23bf10: configure-module/01Hostname_validation is starting
2025-12-04T15:03:25-05:00 [1:headscale1:agent@headscale1] task/module/headscale1/c6a7c1c9-2e7c-4aa7-8102-8386be23bf10: configure-module/10configure_environment_vars is starting
2025-12-04T15:03:26-05:00 [1:headscale1:agent@headscale1] task/module/headscale1/c6a7c1c9-2e7c-4aa7-8102-8386be23bf10: configure-module/20configure_traefik is starting
2025-12-04T15:03:28-05:00 [1:headscale1:agent@headscale1] _acontrol_task request attempt failed (WS reached EOF while waiting for module/traefik1/task/0970989d-2421-4534-b477-8048e8c607be). Retrying...
2025-12-04T15:03:29-05:00 [1:headscale1:agent@headscale1] _acontrol_task request recovered successfully at attempt 2
2025-12-04T15:03:31-05:00 [1:headscale1:agent@headscale1] task/module/headscale1/c6a7c1c9-2e7c-4aa7-8102-8386be23bf10: configure-module/30expand_config is starting
2025-12-04T15:03:31-05:00 [1:headscale1:agent@headscale1] /home/headscale1/.config/actions/configure-module/30expand_config: line 7: config.yaml: command not found
2025-12-04T15:03:31-05:00 [1:headscale1:agent@headscale1] /home/headscale1/.config/actions/configure-module/30expand_config: line 7: config.json: command not found
2025-12-04T15:03:31-05:00 [1:headscale1:agent@headscale1] /home/headscale1/.config/actions/configure-module/30expand_config: line 7: /etc/headscale: No such file or directory
2025-12-04T15:03:31-05:00 [1:headscale1:agent@headscale1] /home/headscale1/.config/actions/configure-module/30expand_config: line 7: /home/headscale1/.headscale: No such file or directory
2025-12-04T15:03:31-05:00 [1:headscale1:agent@headscale1] /home/headscale1/.config/actions/configure-module/30expand_config: line 7: --accept-dns=true: command not found
2025-12-04T15:03:31-05:00 [1:headscale1:agent@headscale1] /home/headscale1/.config/actions/configure-module/30expand_config: line 7: oidc.expiry: command not found
2025-12-04T15:03:31-05:00 [1:headscale1:agent@headscale1] /home/headscale1/.config/actions/configure-module/30expand_config: line 7: base_domain: command not found
2025-12-04T15:03:31-05:00 [1:headscale1:agent@headscale1] /home/headscale1/.config/actions/configure-module/30expand_config: line 7: client_secret_path: command not found
2025-12-04T15:03:31-05:00 [1:headscale1:agent@headscale1] /home/headscale1/.config/actions/configure-module/30expand_config: line 7: dns: command not found
2025-12-04T15:03:31-05:00 [1:headscale1:agent@headscale1] /home/headscale1/.config/actions/configure-module/30expand_config: line 7: hostname.base_domain: command not found
2025-12-04T15:03:31-05:00 [1:headscale1:agent@headscale1] /home/headscale1/.config/actions/configure-module/30expand_config: line 7: LoadCredential: command not found
2025-12-04T15:03:31-05:00 [1:headscale1:agent@headscale1] task/module/headscale1/c6a7c1c9-2e7c-4aa7-8102-8386be23bf10: configure-module/80start_services is starting
2025-12-04T15:03:31-05:00 [1:headscale1:systemd] Reloading.
2025-12-04T15:03:31-05:00 [1:headscale1:systemd] Stopping Podman headscale-app.service...
2025-12-04T15:03:31-05:00 [1:headscale1:systemd] Stopping Podman headscale-ui.service...
2025-12-04T15:03:31-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:31Z INF Received signal to stop, shutting down gracefully signal=terminated
2025-12-04T15:03:31-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:31Z INF shutting down debug http server
2025-12-04T15:03:31-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:31Z INF home/runner/work/headscale/headscale/hscontrol/app.go:272 > scheduled task worker is shutting down.
2025-12-04T15:03:31-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:31Z INF shutting down main http server
2025-12-04T15:03:31-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:31Z INF closing node notifier
2025-12-04T15:03:31-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:31Z INF waiting for netmap stream to close
2025-12-04T15:03:31-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:31Z INF shutting down grpc server (socket)
2025-12-04T15:03:31-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:31Z INF home/runner/work/headscale/headscale/hscontrol/poll.go:602 > node has disconnected, mapSession: 0xc001bce900, chan: 0xc000209dc0 node=wxbox node.id=12 omitPeers=false readOnly=false stream=true
2025-12-04T15:03:31-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:31Z INF home/runner/work/headscale/headscale/hscontrol/poll.go:602 > node has disconnected, mapSession: 0xc000258c00, chan: 0xc0003a6000 node=truenas-ugreen node.id=14 omitPeers=false readOnly=false stream=true
2025-12-04T15:03:31-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:31Z INF closing network listeners
2025-12-04T15:03:31-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:31Z INF closing socket listener
2025-12-04T15:03:31-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:31Z INF closing database connection
2025-12-04T15:03:31-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:31Z INF home/runner/work/headscale/headscale/hscontrol/poll.go:602 > node has disconnected, mapSession: 0xc000b98780, chan: 0xc00032e230 node=pdm node.id=17 omitPeers=false readOnly=false stream=true
2025-12-04T15:03:31-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:31Z INF home/runner/work/headscale/headscale/hscontrol/poll.go:602 > node has disconnected, mapSession: 0xc000956600, chan: 0xc00032fdc0 node=truenas-home node.id=13 omitPeers=false readOnly=false stream=true
2025-12-04T15:03:31-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:31Z INF home/runner/work/headscale/headscale/hscontrol/poll.go:602 > node has disconnected, mapSession: 0xc000d70480, chan: 0xc000372b60 node=imaging-lenovo node.id=2 omitPeers=false readOnly=false stream=true
2025-12-04T15:03:31-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:31Z INF home/runner/work/headscale/headscale/hscontrol/poll.go:602 > node has disconnected, mapSession: 0xc000ca8600, chan: 0xc0003723f0 node=opn node.id=3 omitPeers=false readOnly=false stream=true
2025-12-04T15:03:31-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:31Z INF home/runner/work/headscale/headscale/hscontrol/poll.go:602 > node has disconnected, mapSession: 0xc001bce000, chan: 0xc00030a9a0 node="Dan MacBook Pro 2013 (2)" node.id=1 omitPeers=false readOnly=false stream=true
2025-12-04T15:03:31-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:31Z INF home/runner/work/headscale/headscale/hscontrol/poll.go:602 > node has disconnected, mapSession: 0xc000ca8900, chan: 0xc000387500 node=localhost node.id=8 omitPeers=false readOnly=false stream=true
2025-12-04T15:03:31-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:31Z INF home/runner/work/headscale/headscale/hscontrol/poll.go:602 > node has disconnected, mapSession: 0xc001bcef00, chan: 0xc00030b960 node=localhost node.id=16 omitPeers=false readOnly=false stream=true
2025-12-04T15:03:31-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:31Z INF home/runner/work/headscale/headscale/hscontrol/poll.go:602 > node has disconnected, mapSession: 0xc000238780, chan: 0xc000386a10 node=qidi-q1 node.id=10 omitPeers=false readOnly=false stream=true
2025-12-04T15:03:31-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:31Z INF home/runner/work/headscale/headscale/hscontrol/poll.go:602 > node has disconnected, mapSession: 0xc000205080, chan: 0xc0003658f0 node=opnsense node.id=5 omitPeers=false readOnly=false stream=true
2025-12-04T15:03:31-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:31Z INF home/runner/work/headscale/headscale/hscontrol/poll.go:602 > node has disconnected, mapSession: 0xc000956180, chan: 0xc000364930 node=blv-cube node.id=9 omitPeers=false readOnly=false stream=true
2025-12-04T15:03:31-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:31Z INF home/runner/work/headscale/headscale/hscontrol/poll.go:602 > node has disconnected, mapSession: 0xc001bcf080, chan: 0xc00030b490 node="Dan Mac Mini" node.id=15 omitPeers=false readOnly=false stream=true
2025-12-04T15:03:31-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:31Z INF home/runner/work/headscale/headscale/hscontrol/poll.go:602 > node has disconnected, mapSession: 0xc000b98c00, chan: 0xc000380d20 node=ns8 node.id=11 omitPeers=false readOnly=false stream=true
2025-12-04T15:03:31-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:31Z INF Headscale stopped
2025-12-04T15:03:31-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:31Z ERR http internal server error error="sql: database is closed" code=500
2025-12-04T15:03:31-05:00 [1:headscale1:systemd] libpod-b342e35714f03f6f38bc7c2b6a42a68d38f42ac7f81b8940112285b68b06d1a7.scope: Consumed 5h 47min 16.364s CPU time.
2025-12-04T15:03:31-05:00 [1:headscale1:conmon] conmon b342e35714f03f6f38bc <nwarn>: Failed to open cgroups file: /sys/fs/cgroup/user.slice/user-1023.slice/user@1023.service/user.slice/user-libpod_pod_c17a02e5d4e75f4ed4133bf6bf1a91dac8f840849a8baa1e5c5b7d77787550ed.slice/libpod-b342e35714f03f6f38bc7c2b6a42a68d38f42ac7f81b8940112285b68b06d1a7.scope/container/memory.events
2025-12-04T15:03:31-05:00 [1:headscale1:podman] 2025-12-04 15:03:31.879580756 -0500 EST m=+0.185216988 container died b342e35714f03f6f38bc7c2b6a42a68d38f42ac7f81b8940112285b68b06d1a7 (image=docker.io/headscale/headscale:v0.26.1, name=headscale-app, PODMAN_SYSTEMD_UNIT=headscale-app.service)
2025-12-04T15:03:32-05:00 [1:headscale1:podman] 2025-12-04 15:03:32.100681463 -0500 EST m=+0.406317696 container cleanup b342e35714f03f6f38bc7c2b6a42a68d38f42ac7f81b8940112285b68b06d1a7 (image=docker.io/headscale/headscale:v0.26.1, name=headscale-app, pod_id=c17a02e5d4e75f4ed4133bf6bf1a91dac8f840849a8baa1e5c5b7d77787550ed, PODMAN_SYSTEMD_UNIT=headscale-app.service)
2025-12-04T15:03:32-05:00 [1:headscale1:headscale1] b342e35714f03f6f38bc7c2b6a42a68d38f42ac7f81b8940112285b68b06d1a7
2025-12-04T15:03:32-05:00 [1:headscale1:podman] 2025-12-04 15:03:32.253614458 -0500 EST m=+0.098322554 container remove b342e35714f03f6f38bc7c2b6a42a68d38f42ac7f81b8940112285b68b06d1a7 (image=docker.io/headscale/headscale:v0.26.1, name=headscale-app, pod_id=c17a02e5d4e75f4ed4133bf6bf1a91dac8f840849a8baa1e5c5b7d77787550ed, PODMAN_SYSTEMD_UNIT=headscale-app.service)
2025-12-04T15:03:32-05:00 [1:headscale1:headscale1] b342e35714f03f6f38bc7c2b6a42a68d38f42ac7f81b8940112285b68b06d1a7
2025-12-04T15:03:32-05:00 [1:headscale1:systemd] Stopped Podman headscale-app.service.
2025-12-04T15:03:32-05:00 [1:headscale1:systemd] headscale-app.service: Consumed 8.225s CPU time.
2025-12-04T15:03:41-05:00 [1:headscale1:headscale1] time="2025-12-04T15:03:41-05:00" level=warning msg="StopSignal SIGTERM failed to stop container headscale-ui in 10 seconds, resorting to SIGKILL"
2025-12-04T15:03:41-05:00 [1:headscale1:systemd] libpod-e7d9f0fed0d219be725ba5a7c84d77cf1aa31f8d2c3ca3eee65c91940a3768d5.scope: Consumed 11min 38.508s CPU time.
2025-12-04T15:03:41-05:00 [1:headscale1:conmon] conmon e7d9f0fed0d219be725b <nwarn>: Failed to open cgroups file: /sys/fs/cgroup/user.slice/user-1023.slice/user@1023.service/user.slice/user-libpod_pod_c17a02e5d4e75f4ed4133bf6bf1a91dac8f840849a8baa1e5c5b7d77787550ed.slice/libpod-e7d9f0fed0d219be725ba5a7c84d77cf1aa31f8d2c3ca3eee65c91940a3768d5.scope/container/memory.events
2025-12-04T15:03:41-05:00 [1:headscale1:podman] 2025-12-04 15:03:41.804750941 -0500 EST m=+10.110038375 container died e7d9f0fed0d219be725ba5a7c84d77cf1aa31f8d2c3ca3eee65c91940a3768d5 (image=ghcr.io/gurucomputing/headscale-ui:2025.08.23, name=headscale-ui, PODMAN_SYSTEMD_UNIT=headscale-ui.service)
2025-12-04T15:03:41-05:00 [1:headscale1:podman] 2025-12-04 15:03:41.89910336 -0500 EST m=+10.204390794 container cleanup e7d9f0fed0d219be725ba5a7c84d77cf1aa31f8d2c3ca3eee65c91940a3768d5 (image=ghcr.io/gurucomputing/headscale-ui:2025.08.23, name=headscale-ui, pod_id=c17a02e5d4e75f4ed4133bf6bf1a91dac8f840849a8baa1e5c5b7d77787550ed, PODMAN_SYSTEMD_UNIT=headscale-ui.service)
2025-12-04T15:03:41-05:00 [1:headscale1:headscale1] e7d9f0fed0d219be725ba5a7c84d77cf1aa31f8d2c3ca3eee65c91940a3768d5
2025-12-04T15:03:41-05:00 [1:headscale1:systemd] headscale-ui.service: Main process exited, code=exited, status=137/n/a
2025-12-04T15:03:42-05:00 [1:headscale1:podman] 2025-12-04 15:03:42.058257846 -0500 EST m=+0.101740957 container remove e7d9f0fed0d219be725ba5a7c84d77cf1aa31f8d2c3ca3eee65c91940a3768d5 (image=ghcr.io/gurucomputing/headscale-ui:2025.08.23, name=headscale-ui, pod_id=c17a02e5d4e75f4ed4133bf6bf1a91dac8f840849a8baa1e5c5b7d77787550ed, PODMAN_SYSTEMD_UNIT=headscale-ui.service)
2025-12-04T15:03:42-05:00 [1:headscale1:headscale1] e7d9f0fed0d219be725ba5a7c84d77cf1aa31f8d2c3ca3eee65c91940a3768d5
2025-12-04T15:03:42-05:00 [1:headscale1:systemd] headscale-ui.service: Failed with result 'exit-code'.
2025-12-04T15:03:42-05:00 [1:headscale1:systemd] Stopped Podman headscale-ui.service.
2025-12-04T15:03:42-05:00 [1:headscale1:systemd] headscale-ui.service: Consumed 1.961s CPU time.
2025-12-04T15:03:42-05:00 [1:headscale1:systemd] Stopping Podman headscale.service...
2025-12-04T15:03:42-05:00 [1:headscale1:podman] 2025-12-04 15:03:42.162928076 -0500 EST m=+0.051661030 pod stop c17a02e5d4e75f4ed4133bf6bf1a91dac8f840849a8baa1e5c5b7d77787550ed (image=, name=headscale)
2025-12-04T15:03:42-05:00 [1:headscale1:conmon] conmon f991e015c2ecdc264ac2 <nwarn>: Failed to open cgroups file: /sys/fs/cgroup/user.slice/user-1023.slice/user@1023.service/user.slice/user-libpod_pod_c17a02e5d4e75f4ed4133bf6bf1a91dac8f840849a8baa1e5c5b7d77787550ed.slice/libpod-f991e015c2ecdc264ac2fc1025735644434b541ba3b3cf14e28b3fcf8eaad115.scope/container/memory.events
2025-12-04T15:03:42-05:00 [1:headscale1:podman] 2025-12-04 15:03:42.203665561 -0500 EST m=+0.092398524 container died f991e015c2ecdc264ac2fc1025735644434b541ba3b3cf14e28b3fcf8eaad115 (image=localhost/podman-pause:5.4.0-1758051385, name=c17a02e5d4e7-infra, PODMAN_SYSTEMD_UNIT=headscale.service, io.buildah.version=1.39.4)
2025-12-04T15:03:42-05:00 [1:headscale1:podman] 2025-12-04 15:03:42.315177214 -0500 EST m=+0.203910167 container cleanup f991e015c2ecdc264ac2fc1025735644434b541ba3b3cf14e28b3fcf8eaad115 (image=localhost/podman-pause:5.4.0-1758051385, name=c17a02e5d4e7-infra, pod_id=c17a02e5d4e75f4ed4133bf6bf1a91dac8f840849a8baa1e5c5b7d77787550ed, PODMAN_SYSTEMD_UNIT=headscale.service, io.buildah.version=1.39.4)
2025-12-04T15:03:42-05:00 [1:headscale1:systemd] Removed slice cgroup user-libpod_pod_c17a02e5d4e75f4ed4133bf6bf1a91dac8f840849a8baa1e5c5b7d77787550ed.slice.
2025-12-04T15:03:42-05:00 [1:headscale1:systemd] user-libpod_pod_c17a02e5d4e75f4ed4133bf6bf1a91dac8f840849a8baa1e5c5b7d77787550ed.slice: Consumed 5h 58min 54.892s CPU time.
2025-12-04T15:03:42-05:00 [1:headscale1:podman] headscale
2025-12-04T15:03:42-05:00 [1:headscale1:podman] 2025-12-04 15:03:42.477557766 -0500 EST m=+0.103001886 container remove f991e015c2ecdc264ac2fc1025735644434b541ba3b3cf14e28b3fcf8eaad115 (image=localhost/podman-pause:5.4.0-1758051385, name=c17a02e5d4e7-infra, pod_id=c17a02e5d4e75f4ed4133bf6bf1a91dac8f840849a8baa1e5c5b7d77787550ed, PODMAN_SYSTEMD_UNIT=headscale.service, io.buildah.version=1.39.4)
2025-12-04T15:03:42-05:00 [1:headscale1:systemd] user-libpod_pod_c17a02e5d4e75f4ed4133bf6bf1a91dac8f840849a8baa1e5c5b7d77787550ed.slice: Failed to open /run/user/1023/systemd/transient/user-libpod_pod_c17a02e5d4e75f4ed4133bf6bf1a91dac8f840849a8baa1e5c5b7d77787550ed.slice: No such file or directory
2025-12-04T15:03:42-05:00 [1:headscale1:podman] 2025-12-04 15:03:42.502001904 -0500 EST m=+0.127446024 pod remove c17a02e5d4e75f4ed4133bf6bf1a91dac8f840849a8baa1e5c5b7d77787550ed (image=, name=headscale)
2025-12-04T15:03:42-05:00 [1:headscale1:podman] c17a02e5d4e75f4ed4133bf6bf1a91dac8f840849a8baa1e5c5b7d77787550ed
2025-12-04T15:03:42-05:00 [1:headscale1:systemd] Stopped Podman headscale.service.
2025-12-04T15:03:42-05:00 [1:headscale1:systemd] headscale.service: Consumed 41min 40.120s CPU time.
2025-12-04T15:03:42-05:00 [1:headscale1:systemd] Starting Podman headscale.service...
2025-12-04T15:03:42-05:00 [1:headscale1:systemd] Created slice cgroup user-libpod_pod_f6ecda865b5a3d805755f50b45021efea28280421f8d0e0054195ebad58a54d0.slice.
2025-12-04T15:03:42-05:00 [1:headscale1:podman] 2025-12-04 15:03:42.686740073 -0500 EST m=+0.129913752 container create d2d272436bd3ddb67f92713ca5e9fac0456591b571ab5b8a56e062d0dc261931 (image=localhost/podman-pause:5.4.0-1758051385, name=f6ecda865b5a-infra, pod_id=f6ecda865b5a3d805755f50b45021efea28280421f8d0e0054195ebad58a54d0, PODMAN_SYSTEMD_UNIT=headscale.service, io.buildah.version=1.39.4)
2025-12-04T15:03:42-05:00 [1:headscale1:podman] 2025-12-04 15:03:42.692052168 -0500 EST m=+0.135225847 pod create f6ecda865b5a3d805755f50b45021efea28280421f8d0e0054195ebad58a54d0 (image=, name=headscale)
2025-12-04T15:03:42-05:00 [1:headscale1:podman] f6ecda865b5a3d805755f50b45021efea28280421f8d0e0054195ebad58a54d0
2025-12-04T15:03:42-05:00 [1:headscale1:systemd] Started libcrun container.
2025-12-04T15:03:42-05:00 [1:headscale1:podman] 2025-12-04 15:03:42.951230897 -0500 EST m=+0.209790617 container init d2d272436bd3ddb67f92713ca5e9fac0456591b571ab5b8a56e062d0dc261931 (image=localhost/podman-pause:5.4.0-1758051385, name=f6ecda865b5a-infra, pod_id=f6ecda865b5a3d805755f50b45021efea28280421f8d0e0054195ebad58a54d0, io.buildah.version=1.39.4, PODMAN_SYSTEMD_UNIT=headscale.service)
2025-12-04T15:03:42-05:00 [1:headscale1:podman] 2025-12-04 15:03:42.960153589 -0500 EST m=+0.218713289 container start d2d272436bd3ddb67f92713ca5e9fac0456591b571ab5b8a56e062d0dc261931 (image=localhost/podman-pause:5.4.0-1758051385, name=f6ecda865b5a-infra, pod_id=f6ecda865b5a3d805755f50b45021efea28280421f8d0e0054195ebad58a54d0, io.buildah.version=1.39.4, PODMAN_SYSTEMD_UNIT=headscale.service)
2025-12-04T15:03:42-05:00 [1:headscale1:podman] 2025-12-04 15:03:42.967044724 -0500 EST m=+0.225604424 pod start f6ecda865b5a3d805755f50b45021efea28280421f8d0e0054195ebad58a54d0 (image=, name=headscale)
2025-12-04T15:03:42-05:00 [1:headscale1:podman] headscale
2025-12-04T15:03:42-05:00 [1:headscale1:systemd] Started Podman headscale.service.
2025-12-04T15:03:42-05:00 [1:headscale1:systemd] Starting Podman headscale-app.service...
2025-12-04T15:03:42-05:00 [1:headscale1:systemd] Starting Podman headscale-ui.service...
2025-12-04T15:03:43-05:00 [1:headscale1:podman] 2025-12-04 15:03:43.769074846 -0500 EST m=+0.059861683 image pull b9e7b75fd3b00a9e0e11947e41216355c7b778359f241ad0bdadd826955393bd docker.io/headscale/headscale:v0.26.1
2025-12-04T15:03:43-05:00 [1:headscale1:podman] 2025-12-04 15:03:43.769344276 -0500 EST m=+0.055921815 image pull 3e92eae589bb55c493ee30929b876fb5b2ad96ef210c1c6481ed9d5ef7873c5f ghcr.io/gurucomputing/headscale-ui:2025.08.23
2025-12-04T15:03:43-05:00 [1:headscale1:podman] 2025-12-04 15:03:43.862035423 -0500 EST m=+0.152822250 container create 37fab976649d35cb6e0b84a0431e26b2d0968e48e0188a32c8ee4df2548a7f1c (image=docker.io/headscale/headscale:v0.26.1, name=headscale-app, pod_id=f6ecda865b5a3d805755f50b45021efea28280421f8d0e0054195ebad58a54d0, PODMAN_SYSTEMD_UNIT=headscale-app.service)
2025-12-04T15:03:43-05:00 [1:headscale1:podman] 2025-12-04 15:03:43.884679682 -0500 EST m=+0.171257191 container create 08851d179437f4b9a06fe01fa7c72a07b2ece4b0d5b05fc267b3ea0e6490cb44 (image=ghcr.io/gurucomputing/headscale-ui:2025.08.23, name=headscale-ui, pod_id=f6ecda865b5a3d805755f50b45021efea28280421f8d0e0054195ebad58a54d0, PODMAN_SYSTEMD_UNIT=headscale-ui.service)
2025-12-04T15:03:43-05:00 [1:headscale1:systemd] Started libcrun container.
2025-12-04T15:03:43-05:00 [1:headscale1:systemd] Started libcrun container.
2025-12-04T15:03:44-05:00 [1:headscale1:podman] 2025-12-04 15:03:44.024306792 -0500 EST m=+0.315093629 container init 37fab976649d35cb6e0b84a0431e26b2d0968e48e0188a32c8ee4df2548a7f1c (image=docker.io/headscale/headscale:v0.26.1, name=headscale-app, pod_id=f6ecda865b5a3d805755f50b45021efea28280421f8d0e0054195ebad58a54d0, PODMAN_SYSTEMD_UNIT=headscale-app.service)
2025-12-04T15:03:44-05:00 [1:headscale1:podman] 2025-12-04 15:03:44.031727538 -0500 EST m=+0.318305068 container init 08851d179437f4b9a06fe01fa7c72a07b2ece4b0d5b05fc267b3ea0e6490cb44 (image=ghcr.io/gurucomputing/headscale-ui:2025.08.23, name=headscale-ui, pod_id=f6ecda865b5a3d805755f50b45021efea28280421f8d0e0054195ebad58a54d0, PODMAN_SYSTEMD_UNIT=headscale-ui.service)
2025-12-04T15:03:44-05:00 [1:headscale1:podman] 2025-12-04 15:03:44.035568694 -0500 EST m=+0.326355511 container start 37fab976649d35cb6e0b84a0431e26b2d0968e48e0188a32c8ee4df2548a7f1c (image=docker.io/headscale/headscale:v0.26.1, name=headscale-app, pod_id=f6ecda865b5a3d805755f50b45021efea28280421f8d0e0054195ebad58a54d0, PODMAN_SYSTEMD_UNIT=headscale-app.service)
2025-12-04T15:03:44-05:00 [1:headscale1:podman] 2025-12-04 15:03:44.040588137 -0500 EST m=+0.327165646 container start 08851d179437f4b9a06fe01fa7c72a07b2ece4b0d5b05fc267b3ea0e6490cb44 (image=ghcr.io/gurucomputing/headscale-ui:2025.08.23, name=headscale-ui, pod_id=f6ecda865b5a3d805755f50b45021efea28280421f8d0e0054195ebad58a54d0, PODMAN_SYSTEMD_UNIT=headscale-ui.service)
2025-12-04T15:03:44-05:00 [1:headscale1:headscale1] 37fab976649d35cb6e0b84a0431e26b2d0968e48e0188a32c8ee4df2548a7f1c
2025-12-04T15:03:44-05:00 [1:headscale1:headscale-ui] no Caddyfile detected, copying across default config
2025-12-04T15:03:44-05:00 [1:headscale1:headscale1] 08851d179437f4b9a06fe01fa7c72a07b2ece4b0d5b05fc267b3ea0e6490cb44
2025-12-04T15:03:44-05:00 [1:headscale1:headscale-ui] Starting Caddy
2025-12-04T15:03:44-05:00 [1:headscale1:systemd] Started Podman headscale-app.service.
2025-12-04T15:03:44-05:00 [1:headscale1:systemd] Started Podman headscale-ui.service.
2025-12-04T15:03:44-05:00 [1:headscale1:agent@headscale1] task/module/headscale1/c6a7c1c9-2e7c-4aa7-8102-8386be23bf10: action "configure-module" status is "completed" (0) at step 80start_services
2025-12-04T15:03:44-05:00 [1:headscale1:agent@headscale1] task/module/headscale1/77652a29-fdc1-4fbc-97cd-73d4d8464318: get-configuration/20read is starting
2025-12-04T15:03:44-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:44Z WRN An updated version of Headscale has been found (0.27.2-rc.1 vs. your current 0.26.1). Check it out https://github.com/juanfont/headscale/releases
2025-12-04T15:03:44-05:00 [1:headscale1:headscale-app]
2025-12-04T15:03:44-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:44Z INF Opening database database=sqlite3 path=/var/lib/headscale/db.sqlite
2025-12-04T15:03:44-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:44Z INF Using policy manager version: 2
2025-12-04T15:03:44-05:00 [1:headscale1:headscale-ui] {"level":"info","ts":1764878624.6794894,"msg":"maxprocs: Leaving GOMAXPROCS=8: CPU quota undefined"}
2025-12-04T15:03:44-05:00 [1:headscale1:headscale-ui] {"level":"info","ts":1764878624.682133,"msg":"GOMEMLIMIT is updated","package":"github.com/KimMachineGun/automemlimit/memlimit","GOMEMLIMIT":28141774848,"previous":9223372036854775807}
2025-12-04T15:03:44-05:00 [1:headscale1:headscale-ui] {"level":"info","ts":1764878624.682316,"msg":"using config from file","file":"/data/Caddyfile"}
2025-12-04T15:03:44-05:00 [1:headscale1:headscale-ui] {"level":"info","ts":1764878624.6861572,"msg":"adapted config to JSON","adapter":"caddyfile"}
2025-12-04T15:03:44-05:00 [1:headscale1:headscale-ui] {"level":"info","ts":1764878624.6954193,"logger":"admin","msg":"admin endpoint started","address":"localhost:2019","enforce_origin":false,"origins":["//[::1]:2019","//127.0.0.1:2019","//localhost:2019"]}
2025-12-04T15:03:44-05:00 [1:headscale1:headscale-ui] {"level":"info","ts":1764878624.6961994,"logger":"tls.cache.maintenance","msg":"started background certificate maintenance","cache":"0xc00097ad00"}
2025-12-04T15:03:44-05:00 [1:headscale1:headscale-ui] {"level":"info","ts":1764878624.7207823,"logger":"http.auto_https","msg":"server is listening only on the HTTPS port but has no TLS connection policies; adding one to enable TLS","server_name":"srv1","https_port":8443}
2025-12-04T15:03:44-05:00 [1:headscale1:headscale-ui] {"level":"info","ts":1764878624.720852,"logger":"http.auto_https","msg":"automatic HTTP->HTTPS redirects are disabled","server_name":"srv1"}
2025-12-04T15:03:44-05:00 [1:headscale1:headscale-ui] {"level":"warn","ts":1764878624.7209647,"logger":"http.auto_https","msg":"server is listening only on the HTTP port, so no automatic HTTPS will be applied to this server","server_name":"srv0","http_port":8081}
2025-12-04T15:03:44-05:00 [1:headscale1:headscale-ui] {"level":"info","ts":1764878624.721374,"logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2025-12-04T15:03:44-05:00 [1:headscale1:headscale-ui] {"level":"warn","ts":1764878624.7235773,"logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":8081"}
2025-12-04T15:03:44-05:00 [1:headscale1:headscale-ui] {"level":"warn","ts":1764878624.723642,"logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":8081"}
2025-12-04T15:03:44-05:00 [1:headscale1:headscale-ui] {"level":"info","ts":1764878624.7236478,"logger":"http.log","msg":"server running","name":"srv0","protocols":["h1","h2","h3"]}
2025-12-04T15:03:44-05:00 [1:headscale1:headscale-ui] {"level":"info","ts":1764878624.723997,"logger":"http","msg":"enabling HTTP/3 listener","addr":":8443"}
2025-12-04T15:03:44-05:00 [1:headscale1:headscale-ui] {"level":"info","ts":1764878624.7243083,"msg":"failed to sufficiently increase receive buffer size (was: 208 kiB, wanted: 7168 kiB, got: 416 kiB). See https://github.com/quic-go/quic-go/wiki/UDP-Buffer-Sizes for details."}
2025-12-04T15:03:44-05:00 [1:headscale1:headscale-ui] {"level":"info","ts":1764878624.7281933,"logger":"http.log","msg":"server running","name":"srv1","protocols":["h1","h2","h3"]}
2025-12-04T15:03:44-05:00 [1:headscale1:headscale-ui] {"level":"warn","ts":1764878624.7282598,"logger":"tls","msg":"YOUR SERVER MAY BE VULNERABLE TO ABUSE: on-demand TLS is enabled, but no protections are in place","docs":"https://caddyserver.com/docs/automatic-https#on-demand-tls"}
2025-12-04T15:03:44-05:00 [1:headscale1:headscale-ui] {"level":"info","ts":1764878624.7288668,"msg":"autosaved config (load with --resume flag)","file":"/home/appuser/.config/caddy/autosave.json"}
2025-12-04T15:03:44-05:00 [1:headscale1:headscale-ui] {"level":"info","ts":1764878624.728888,"msg":"serving initial configuration"}
2025-12-04T15:03:44-05:00 [1:headscale1:headscale-ui] {"level":"info","ts":1764878624.7311456,"logger":"tls","msg":"cleaning storage unit","storage":"FileStorage:/home/appuser/.local/share/caddy"}
2025-12-04T15:03:44-05:00 [1:headscale1:headscale-ui] {"level":"info","ts":1764878624.7355766,"logger":"tls","msg":"finished cleaning storage units"}
2025-12-04T15:03:44-05:00 [1:headscale1:agent@headscale1] task/module/headscale1/77652a29-fdc1-4fbc-97cd-73d4d8464318: action "get-configuration" status is "completed" (0) at step validate-output.json
2025-12-04T15:03:45-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:45Z INF Starting Headscale commit=474ea236d0c6d393dbcf7baa98da240ad20c1b66 version=0.26.1
2025-12-04T15:03:45-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:45Z INF Clients with a lower minimum version will be rejected minimum_version=v1.62.0
2025-12-04T15:03:45-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:45Z WRN Listening without TLS but ServerURL does not start with http://
2025-12-04T15:03:45-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:45Z INF listening and serving HTTP on: 0.0.0.0:8080
2025-12-04T15:03:45-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:45Z INF home/runner/work/headscale/headscale/hscontrol/poll.go:602 > node has connected, mapSession: 0xc000212480, chan: 0xc00048abd0 node=pdm node.id=17 omitPeers=false readOnly=false stream=true
2025-12-04T15:03:45-05:00 [1:headscale1:headscale-app] 2025-12-04T20:03:45Z INF listening and serving debug and metrics on: 127.0.0.1:9090
I’m working on a new headscale app version that includes headplane as UI.
The app doesn’t completely rewrite the headscale config file anymore as it will be managed by headplane in future so I hope that those issues won’t occur anymore.
Also a new python driven template will replace the bash template that causes most of the errors in the shared logs.
Looking forward to it. Any chance of being able to save the connection data from the existing app? I’m less concerned about OIDC (I can reconfigure that easily enough) than about devices already authenticated to my tailnet.
Yes, the connection data that is saved in a sqlite db should be kept.
now new with dex(?) as IDP
and easier to setup
fyi
@frx44 is this a new request for Netbird, maybe a dedicated Feature request post would be better, dont you think?