mirror of
https://github.com/juanfont/headscale.git
synced 2026-09-17 05:52:17 +09:00
Deployed 38722e5e to development with ProperDocs 1.6.7 and mike 2.2.0
This commit is contained in:
@@ -69,7 +69,7 @@
|
||||
</span><span id=__span-7-8><a id=__codelineno-7-8 name=__codelineno-7-8 href=#__codelineno-7-8></a><span class=w> </span><span class=p>}</span>
|
||||
</span><span id=__span-7-9><a id=__codelineno-7-9 name=__codelineno-7-9 href=#__codelineno-7-9></a><span class=w> </span><span class=p>]</span>
|
||||
</span><span id=__span-7-10><a id=__codelineno-7-10 name=__codelineno-7-10 href=#__codelineno-7-10></a><span class=p>}</span>
|
||||
</span></code></pre></div> <h3 id=autogroupdanger-all><a href=https://tailscale.com/docs/reference/targets-and-selectors#autogroupdanger-all><code>autogroup:danger-all</code></a><a class=headerlink href=#autogroupdanger-all title="Permanent link">¶</a></h3> <p>This autogroup resolves to all IP addresses (<code>0.0.0.0/0</code> and <code>::/0</code>) which also includes all IP addresses outside the standard Tailscale IP ranges. This autogroup can only be used as source.</p> <h2 id=node-attributes>Node Attributes<a class=headerlink href=#node-attributes title="Permanent link">¶</a></h2> <p><a href=https://tailscale.com/docs/reference/syntax/policy-file#node-attributes>Node attributes</a> allow for device-specific configuration and attributes. At least the following node attributes are currently supported by Headscale<sup id=fnref:2><a class=footnote-ref href=#fn:2>2</a></sup>:</p> <ul> <li><code>drive:access</code>, <code>drive:share</code>: <a href=https://tailscale.com/docs/features/taildrive>Taildrive support</a>.</li> <li><code>nextdns:<profile></code>, <code>nextdns:no-device-info</code>: <a href=https://tailscale.com/docs/integrations/nextdns>NextDNS integration</a>. Be sure to set NextDNS as global resolver in the <a href=../configuration/ >configuration</a>.</li> <li><code>magicdns-aaaa</code>: Respond to AAAA queries on the local <a href=https://tailscale.com/docs/features/magicdns>MagicDNS</a> resolver at 100.100.100.100.</li> <li><code>disable-ipv4</code>: Selectively disable IPv4 for specfic nodes. This is may be useful to workaround <a href=https://tailscale.com/docs/reference/troubleshooting/network-configuration/cgnat-conflicts>CGNat conflicts</a>.</li> <li><code>randomize-client-port</code>: Allocate a <a href=https://tailscale.com/docs/reference/syntax/policy-file#randomizeclientport>random port for WireGuard traffic</a> instead of the static default port 41641.</li> <li><code>disable-captive-portal-detection</code>: <a href=https://tailscale.com/docs/integrations/captive-portals#disable-captive-portal-detection>Disable automatic captive portal detection</a>.</li> </ul> <div class="language-json highlight"><span class=filename>policy.json</span><pre><span></span><code><span id=__span-8-1><a id=__codelineno-8-1 name=__codelineno-8-1 href=#__codelineno-8-1></a><span class=p>{</span>
|
||||
</span></code></pre></div> <h3 id=autogroupdanger-all><a href=https://tailscale.com/docs/reference/targets-and-selectors#autogroupdanger-all><code>autogroup:danger-all</code></a><a class=headerlink href=#autogroupdanger-all title="Permanent link">¶</a></h3> <p>This autogroup resolves to all IP addresses (<code>0.0.0.0/0</code> and <code>::/0</code>) which also includes all IP addresses outside the standard Tailscale IP ranges. This autogroup can only be used as source.</p> <h2 id=node-attributes>Node Attributes<a class=headerlink href=#node-attributes title="Permanent link">¶</a></h2> <p><a href=https://tailscale.com/docs/reference/syntax/policy-file#node-attributes>Node attributes</a> allow for device-specific configuration and attributes. At least the following node attributes are currently supported by Headscale<sup id=fnref:2><a class=footnote-ref href=#fn:2>2</a></sup>:</p> <ul> <li><code>drive:access</code>, <code>drive:share</code>: <a href=https://tailscale.com/docs/features/taildrive>Taildrive support</a>.</li> <li><code>suggest-exit-node</code>, <code>suggest-exit-node-ui</code>: <a href=../routes/#automatic-exit-node-selection>Automatic exit node selection</a>.</li> <li><code>nextdns:<profile></code>, <code>nextdns:no-device-info</code>: <a href=https://tailscale.com/docs/integrations/nextdns>NextDNS integration</a>. Be sure to set NextDNS as global resolver in the <a href=../configuration/ >configuration</a>.</li> <li><code>magicdns-aaaa</code>: Respond to AAAA queries on the local <a href=https://tailscale.com/docs/features/magicdns>MagicDNS</a> resolver at 100.100.100.100.</li> <li><code>disable-ipv4</code>: Selectively disable IPv4 for specfic nodes. This is may be useful to workaround <a href=https://tailscale.com/docs/reference/troubleshooting/network-configuration/cgnat-conflicts>CGNat conflicts</a>.</li> <li><code>randomize-client-port</code>: Allocate a <a href=https://tailscale.com/docs/reference/syntax/policy-file#randomizeclientport>random port for WireGuard traffic</a> instead of the static default port 41641.</li> <li><code>disable-captive-portal-detection</code>: <a href=https://tailscale.com/docs/integrations/captive-portals#disable-captive-portal-detection>Disable automatic captive portal detection</a>.</li> </ul> <div class="language-json highlight"><span class=filename>policy.json</span><pre><span></span><code><span id=__span-8-1><a id=__codelineno-8-1 name=__codelineno-8-1 href=#__codelineno-8-1></a><span class=p>{</span>
|
||||
</span><span id=__span-8-2><a id=__codelineno-8-2 name=__codelineno-8-2 href=#__codelineno-8-2></a><span class=w> </span><span class=nt>"nodeAttrs"</span><span class=p>:</span><span class=w> </span><span class=p>[</span>
|
||||
</span><span id=__span-8-3><a id=__codelineno-8-3 name=__codelineno-8-3 href=#__codelineno-8-3></a><span class=w> </span><span class=p>{</span>
|
||||
</span><span id=__span-8-4><a id=__codelineno-8-4 name=__codelineno-8-4 href=#__codelineno-8-4></a><span class=w> </span><span class=c1>// Enable MagicDNS AAAA records for all nodes</span>
|
||||
|
||||
File diff suppressed because one or more lines are too long
Reference in New Issue
Block a user