summaryrefslogtreecommitdiff
path: root/playbooks/roles/outbound/templates/headscale/config/config.yaml
diff options
context:
space:
mode:
authorElizabeth Hunt <me@liz.coffee>2025-07-26 23:40:15 -0700
committerElizabeth Hunt <me@liz.coffee>2025-07-26 23:40:15 -0700
commit9940cd169e931631a0da142f72a8ca6c878e34ed (patch)
tree4aa2f612b3eb6f2bb5905f66947bf394a797f584 /playbooks/roles/outbound/templates/headscale/config/config.yaml
parent3d9e02eb8f9d380db7d7d4e947b857c30e4b4874 (diff)
downloadinfra-9940cd169e931631a0da142f72a8ca6c878e34ed.tar.gz
infra-9940cd169e931631a0da142f72a8ca6c878e34ed.zip
CI. Fuck.
Diffstat (limited to 'playbooks/roles/outbound/templates/headscale/config/config.yaml')
-rw-r--r--playbooks/roles/outbound/templates/headscale/config/config.yaml11
1 files changed, 7 insertions, 4 deletions
diff --git a/playbooks/roles/outbound/templates/headscale/config/config.yaml b/playbooks/roles/outbound/templates/headscale/config/config.yaml
index d3bff5a..54657b2 100644
--- a/playbooks/roles/outbound/templates/headscale/config/config.yaml
+++ b/playbooks/roles/outbound/templates/headscale/config/config.yaml
@@ -120,14 +120,18 @@ policy:
dns:
magic_dns: true
base_domain: "{{ headscale_base_domain }}"
+ search_domains: []
nameservers:
global:
- {{ headscale_dns_for_connected_clients_1 }}
- {{ headscale_dns_for_connected_clients_2 }}
split:
- {{ domain }}:
- - {{ loadbalancer_ip }}
- search_domains: []
+{% for user, m in mesh.items() %}
+{% if "split_vpn_dns_to" in m %}
+ {{ m.domain }}:
+ - {{ m.split_vpn_dns_to }}
+{% endif %}
+{% endfor %}
unix_socket: /var/run/headscale/headscale.sock
unix_socket_permission: "0770"
@@ -151,7 +155,6 @@ oidc:
- {{ domain }}
allowed_groups:
- vpn@{{ idm_domain }}
- strip_email_domain: true
# Logtail configuration
# Logtail is Tailscales logging and auditing infrastructure, it allows the control panel