How to host on a public address with funnel

[gbraad]

To expose the headscale coordination server to a public address can be done with Tailscale's funnel. On the coordination server, just run a Tailscale client and register this to a known tailnet.

Set up and register the headscale node:

$ dnf config-manager --add-repo https://pkgs.tailscale.com/stable/fedora/tailscale.repo \
    && dnf install -y \
        tailscale
    && sed -i 's/FLAGS=""/FLAGS="--tun=userspace-networking"/g' /etc/default/tailscaled \
    && systemctl enable --now tailscaled
$ tailscale up
... register the node to a tailnet hosted by tailscale / ts.net
$ tailscale serve tls-terminated-tcp:443 tcp://localhost:8080
$ tailscale funnel 443 on

You can use the public funnel address that was given to the coordination server.

Then to register a new client node to headscale:

$ sudo tailscale up --login-server https://headscale.[tailnet name].ts.net --force-reauth