rsp2k/headscale
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

Commit Graph

  • 42b8c779a0 hscontrol: limit /verify request body size Kristoffer Dalby 2026-04-09 17:56:55 +00:00
  • a3c4ad2ca3 types: omit secret fields from JSON marshalling Kristoffer Dalby 2026-04-09 17:54:46 +00:00
  • 0641771128 db: guard UsePreAuthKey with WHERE used=false Kristoffer Dalby 2026-04-09 17:52:03 +00:00
  • f7d8bb8b3f app: remove gRPC reflection from remote server Kristoffer Dalby 2026-04-09 17:48:41 +00:00
  • adb9467f60 oidc: validate state parameter length in callback Kristoffer Dalby 2026-04-09 17:44:42 +00:00
  • 41d70fe87b auth: check machine key on tailscaled-restart fast path Kristoffer Dalby 2026-04-09 17:44:21 +00:00
  • 99767cf805 hscontrol: validate machine key and bind src/dst in SSH check handler Kristoffer Dalby 2026-04-09 17:41:01 +00:00
  • 0d4f2293ff state: replace zcache with bounded LRU for auth cache Kristoffer Dalby 2026-04-09 17:27:42 +00:00
  • 3587225a88 mapper: fix phantom updateSentPeers on disconnected nodes Kristoffer Dalby 2026-04-08 12:27:04 +00:00
  • 9371b4ee28 mapper: fix empty Peers list not clearing client peer state Kristoffer Dalby 2026-04-08 12:26:44 +00:00
  • cef5338cfe types/change: panic on Merge with conflicting TargetNode values Kristoffer Dalby 2026-04-08 12:26:22 +00:00
  • 3529fe0da1 types: fix OIDC identifier path traversal dropping subject Kristoffer Dalby 2026-04-08 12:26:06 +00:00
  • 4064f13bda types: fix nil panics in Owner() and TailscaleUserID() for orphaned nodes Kristoffer Dalby 2026-04-08 12:25:50 +00:00
  • 3037e5eee0 db: fix slice aliasing in migration tag merge Kristoffer Dalby 2026-04-08 12:25:21 +00:00
  • 82bb4331f5 state: fix routesChanged mutating input Hostinfo Kristoffer Dalby 2026-04-02 13:11:25 +00:00
  • 2a2d5c869a types/change: fix slice aliasing in Change.Merge Kristoffer Dalby 2026-04-02 13:10:20 +00:00
  • 157e3a30fc AGENTS.md: trim to behavioural guidance, drop deprecated sub-agent Kristoffer Dalby 2026-04-09 15:42:24 +00:00
  • 70b622fc68 docs: expand cmd/hi and integration READMEs Kristoffer Dalby 2026-04-09 15:39:15 +00:00
  • 742878d172 all: regenerate generated files for new tool versions Kristoffer Dalby 2026-04-09 16:51:25 +00:00
  • 2109674467 nix: update flake inputs and dev shell tool versions Kristoffer Dalby 2026-04-09 16:10:07 +00:00
  • 36a73f8c22 all: update Go dependencies Kristoffer Dalby 2026-04-09 16:09:43 +00:00
  • e40dbe3b28 Dockerfile: bump tailscale DERPer builder to Go 1.26.2 Kristoffer Dalby 2026-04-09 16:09:01 +00:00
  • 7c756b8201 db: scope DestroyUser to only delete the target user's pre-auth keys Jacky 2026-03-27 13:12:20 +00:00
  • 6ae182696f state: fix policy change race in UpdateNodeFromMapRequest Kristoffer Dalby 2026-03-11 08:09:08 +00:00
  • ccddeceeec state: fix GORM not persisting user_id=NULL on tagged node conversion Kristoffer Dalby 2026-04-08 08:42:50 +00:00
  • 580dcad683 hscontrol: add tests for SetTags user_id database persistence Kristoffer Dalby 2026-04-08 08:42:50 +00:00
  • 442fcdbd33 capver: regenerate for tailscale v1.96 Kristoffer Dalby 2026-04-08 11:20:16 +00:00
  • 380f531342 state: trigger PolicyChange on every Connect and Disconnect Kristoffer Dalby 2026-04-08 10:31:54 +00:00
  • 51eed414b4 integration: fix ACL tests for address-family-specific resolve Kristoffer Dalby 2026-04-08 10:31:35 +00:00
  • e638cbc9b9 integration/tsic: accept via peer-relay in non-direct ping check Kristoffer Dalby 2026-04-08 10:31:08 +00:00
  • 6390fcee79 Dockerfile: bump tailscale HEAD builder to Go 1.26.2 Kristoffer Dalby 2026-04-08 10:30:52 +00:00
  • b52f8cb52f CHANGELOG: document node.expiry and oidc.expiry deprecation Kristoffer Dalby 2026-04-02 20:43:09 +00:00
  • ff29af63f6 servertest: use memnet networking and add WithNodeExpiry option Kristoffer Dalby 2026-04-02 09:19:05 +00:00
  • 7e8930c507 hscontrol: add tests for default node key expiry Kristoffer Dalby 2026-03-01 22:54:10 +00:00
  • 6337a3dbc4 state: apply default node key expiry on registration Kristoffer Dalby 2026-03-01 22:53:55 +00:00
  • 4d0b273b90 types: add node.expiry config, deprecate oidc.expiry Kristoffer Dalby 2026-03-01 22:53:26 +00:00
  • 23a5f1b628 Use pymdownx.magiclink with its default configuration Florian Preinstorfer 2026-03-29 16:51:06 +02:00
  • 44600550c6 Fix invisible selected menu item Florian Preinstorfer 2026-03-29 16:41:46 +02:00
  • 835db974b5 testdata: strip unused fields from all test data files (23MB -> 4MB) Kristoffer Dalby 2026-03-30 17:10:53 +00:00
  • 30dce30a9d testdata: convert .json to .hujson with header comments Kristoffer Dalby 2026-03-30 17:08:26 +00:00
  • f693cc0851 CHANGELOG: document grants support for 0.29.0 Kristoffer Dalby 2026-03-24 06:44:52 +00:00
  • abd2b15db5 policy/v2: clean up dead error variables, stale TODO, and test skip reasons Kristoffer Dalby 2026-03-30 13:15:09 +00:00
  • b762e4c350 integration: remove exit node via grant tests Kristoffer Dalby 2026-03-29 06:08:06 +00:00
  • c36cedc32f policy/v2: fix via grants in BuildPeerMap, MatchersForNode, and ViaRoutesForPeer Kristoffer Dalby 2026-03-28 12:48:19 +00:00
  • 6a55f7d731 policy/v2: add via exit steering golden captures and tests Kristoffer Dalby 2026-03-28 11:05:16 +00:00
  • bca6e6334d integration: add custom subnet support and fix exit node tests Kristoffer Dalby 2026-03-26 21:33:48 +00:00
  • 0431039f2a servertest: add regression tests for via grant filter rules Kristoffer Dalby 2026-03-26 06:03:55 +00:00
  • ccd284c0a5 policy/v2: use per-node filter compilation for via grants Kristoffer Dalby 2026-03-26 06:03:28 +00:00
  • 9db5fb6393 integration: fix error message assertion for invalid ACL action Kristoffer Dalby 2026-03-25 15:10:47 +00:00
  • 3ca4ff8f3f state,servertest: add grant control plane tests and fix via route ReduceRoutes filtering Kristoffer Dalby 2026-03-23 16:25:27 +00:00
  • 5cd5e5de69 policy/v2: add unit tests for ViaRoutesForPeer Kristoffer Dalby 2026-03-23 16:25:15 +00:00
  • 08d26e541c policy/v2: add unit tests for grant filter compilation helpers Kristoffer Dalby 2026-03-23 16:25:03 +00:00
  • d243adaedd types,mapper,integration: enable Taildrive and add cap/drive grant lifecycle test Kristoffer Dalby 2026-03-23 09:43:30 +00:00
  • 9b1a6b6c05 integration: add cap/relay grant peer relay lifecycle test Kristoffer Dalby 2026-03-23 08:22:41 +00:00
  • 8573ff9158 policy/v2: fix grant-only policies returning FilterAllowAll Kristoffer Dalby 2026-03-23 08:22:26 +00:00
  • a739862c65 integration: add via grant route steering tests Kristoffer Dalby 2026-03-22 20:43:57 +00:00
  • 8358017dcf policy/v2,state,mapper: implement per-viewer via route steering Kristoffer Dalby 2026-03-22 20:43:28 +00:00
  • 28be15f8ea policy/v2: handle autogroup:internet in via grant compilation Kristoffer Dalby 2026-03-22 20:42:30 +00:00
  • 687cf0882f policy/v2: implement autogroup:danger-all support Kristoffer Dalby 2026-03-18 23:09:42 +00:00
  • 4f040dead2 policy/v2: implement grant validation rules matching Tailscale SaaS Kristoffer Dalby 2026-03-18 21:15:58 +00:00
  • 54db47badc policy/v2: implement via route compilation for grants Kristoffer Dalby 2026-03-18 20:30:29 +00:00
  • 0e3acdd8ec policy/v2: implement CapGrant compilation with companion capabilities Kristoffer Dalby 2026-03-18 19:55:15 +00:00
  • ebe0f4078d policy/v2: preserve non-wildcard source IPs alongside wildcard ranges Kristoffer Dalby 2026-03-18 16:14:37 +00:00
  • dda35847b0 policy/v2: reorder ACL self grants to match Tailscale rule ordering Kristoffer Dalby 2026-03-18 15:12:18 +00:00
  • f95b254ea9 policy/v2: exclude exit routes from ReduceFilterRules Kristoffer Dalby 2026-03-18 14:40:12 +00:00
  • e05f45cfb1 policy/v2: use approved node routes in wildcard SrcIPs Kristoffer Dalby 2026-03-18 13:40:36 +00:00
  • 995ed0187c policy/v2: add advertised routes to compat test topologies Kristoffer Dalby 2026-03-18 13:40:19 +00:00
  • 927ce418d2 policy/v2: use bare IPs in autogroup:self DstPorts Kristoffer Dalby 2026-03-18 10:39:55 +00:00
  • 93d79d8da9 policy: include IPv6 in identity-based alias resolution Kristoffer Dalby 2026-03-18 10:24:30 +00:00
  • 500442c8f1 policy/v2: convert routes compat tests to data-driven format with Tailscale SaaS captures Kristoffer Dalby 2026-03-17 12:05:49 +00:00
  • 2fb71690e8 policy/v2: convert ACL compat tests to data-driven format with Tailscale SaaS captures Kristoffer Dalby 2026-03-17 11:13:04 +00:00
  • 9f7aa55689 policy/v2: refactor alias resolution to use ResolvedAddresses Kristoffer Dalby 2026-03-04 16:16:40 +01:00
  • 0fa9dcaff8 policy/v2: add data-driven grants compatibility test with Tailscale SaaS captures Kristoffer Dalby 2026-02-23 15:39:54 +00:00
  • f74ea5b8ed hscontrol/policy/v2: add Grant policy format support Kristoffer Dalby 2026-02-23 04:18:31 +01:00
  • 53b8a81d48 servertest: support tagged pre-auth keys in test clients Kristoffer Dalby 2026-03-25 15:10:09 +00:00
  • 15c1cfd778 types: include ExitRoutes in HasNetworkChanges Kristoffer Dalby 2026-03-26 18:21:16 +00:00
  • a76b4bd46c ci: switch integration tests to ARM runners Kristoffer Dalby 2026-03-31 17:50:14 +00:00
  • a9a2001ae7 integration: scale remaining hardcoded timeouts and replace pingAllHelper Kristoffer Dalby 2026-03-31 07:17:36 +00:00
  • acb8cfc7ee integration: make docker execute and ping timeouts CI-aware Kristoffer Dalby 2026-03-31 07:15:47 +00:00
  • f1e5f1346d integration/acl: add tag verification step to TestACLTagPropagationPortSpecific Kristoffer Dalby 2026-03-30 15:56:31 +00:00
  • 210f58f62e integration: use CI-scaled timeouts for all EventuallyWithT assertions Kristoffer Dalby 2026-03-30 13:48:58 +00:00
  • a147b0cd87 integration/acl: use CurlFailFast for all negative curl assertions Kristoffer Dalby 2026-03-30 13:45:22 +00:00
  • a7edcf3b0f integration: add CI-scaled timeouts and curl helpers for flaky ACL tests Kristoffer Dalby 2026-03-30 13:41:36 +00:00
  • fda72ad1a3 Update main.md Kristoffer Dalby 2026-03-31 13:34:39 +02:00
  • dfaf120f2a docs: add development builds install page Kristoffer Dalby 2026-03-27 09:26:04 +00:00
  • e171d30179 ci: add build workflow for main branch Kristoffer Dalby 2026-03-26 07:50:55 +00:00
  • 0c6b9f5348 goreleaser: remove unused ts2019 build tag Kristoffer Dalby 2026-03-26 07:50:48 +00:00
  • f3512d50df Switch to mkdocs-materialx Florian Preinstorfer 2026-03-25 16:23:40 +01:00
  • efd83da14e Explicitly mention that a headscale username should *not* end with @ Florian Preinstorfer 2026-03-20 19:34:12 +01:00
  • 568baf3d02 fix: align banner right-side border to consistent 64-char width Tanayk07 2026-03-17 11:34:23 +05:30
  • 5105033224 feat: add prominent warning banner for non-standard IP prefixes Tanayk07 2026-03-08 12:39:17 +05:30
  • 3d53f97c82 hscontrol/servertest: fix test expectations for eventual consistency Kristoffer Dalby 2026-03-17 14:37:18 +00:00
  • 1053fbb16b hscontrol/state: fix online status reset during re-registration Kristoffer Dalby 2026-03-17 14:36:18 +00:00
  • b09af3846b hscontrol/poll,state: fix grace period disconnect TOCTOU race Kristoffer Dalby 2026-03-17 14:35:18 +00:00
  • 00c41b6422 hscontrol/servertest: add race, stress, and poll race tests Kristoffer Dalby 2026-03-17 14:32:35 +00:00
  • ab4e205ce7 hscontrol/servertest: expand issue tests to 24 scenarios, surface 4 issues Kristoffer Dalby 2026-03-16 20:20:19 +00:00
  • f87b08676d hscontrol/servertest: add policy, route, ephemeral, and content tests Kristoffer Dalby 2026-03-16 19:09:10 +00:00
  • ca7362e9aa hscontrol/servertest: add control plane lifecycle and consistency tests Kristoffer Dalby 2026-03-16 17:07:23 +00:00
  • 0288614bdf hscontrol: add servertest harness for in-process control plane testing Kristoffer Dalby 2026-03-16 09:16:43 +00:00
  • 82c7efccf8 mapper/batcher: serialize per-node work to prevent out-of-order delivery Kristoffer Dalby 2026-03-14 16:09:22 +00:00