r/selfhosted icon

Go to selfhosted

Setting up Headscale VPN

Guide

Clickable image which will reveal the video player: Unraid now supports ZFS—offering ultimate flexibility with full ZFS or hybrid storage, thousands of apps, and seamless VM management. Try it free today and make the switch to the most versatile OS around.

just for context, here's the intro blurb from the guide series:

Virtual Private Networks (VPN)s are a fantastic technology. They let us build out our private infrastructure in a secure and encrypted fashion. For people who don’t want to brave the dangers of exposing services to the web, they are an invaluable tool.

One of the most well known VPNs out there is wireguard. Wireguard lets us create VPNs in a simple, incredibly resource efficient manner. In fact, some of you might already use wireguard as a site to site vpn. Fantastic! However this guide isn’t about wireguard.

Something wireguard is less known for, but is far more impressive, is its capability to be a building block for large scale networks. Smart VPNs that utilise wireguard internally have exploded lately. Here’s a fun list:

That’s nowhere near a comprehensive list, but it’s a good start. This guide is going to delve into making our own smart VPN with Headscale.

Hi I am looking at self hosting my own vpn using pritunl VPN software on Linux VPS. I would welcome your feedback. Thanks

Hey OP, I would be very interested in a comprehensive headscale tutorial. I went with ZeroTier because I liked that I can selfhost but I would love to use headscale or Netmaker, but a good guide is hard to come by. I’ll be looking forward to your tutorial

More replies

I tried checking this out of curiosity and I've been using wireguard for years.

I've successfully followed the guide and it worked, thanks to the detailed guide.

but after finishing I got confused as headscale gui and /web or /windows is just right there out in the public for anybody to access. So, I'm really confused about security or how to secure my newly build headscale VPN

I was planning to set up! Nice timing!
EDIT:

Windows clients require registry change

Got dam... ok if I want family to use it I will need to look into zero tier

Registry changes are quite easy to automate. just provide them with a .reg file.

More replies More replies

i know this is a bit old, but can you please merge the headscale & caddy docker compose into one single file? i tried but i'm getting a bit confused with the network section.