harald/nixcfg
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

refactor(attic): move headscale from mx to attic

Browse source 
Headscale is moving off the mx mailserver onto the attic cache host.
The new public URL is https://headscale.hoyer.world.

- Switch from useACMEHost = "hoyer.xyz" (mx wildcard DNS-01) to
  enableACME = true, since attic only has HTTP-01 configured.
- Move headscale port to 8081 to avoid clashing with atticd on 8080.
- Drop the 192.168.178.254 LAN nameserver from dns.nameservers.global,
  which isn't reachable from the Hetzner instance.

Operational steps still required on attic:
- Provision /var/lib/headscale/client_secret
- Migrate the headscale state DB from mx
- Point headscale.hoyer.world DNS at attic
- Update the Nextcloud OIDC client's redirect URI
This commit is contained in:
Harald Hoyer 2026-05-13 08:42:46 +02:00
parent 1094facb1e
commit 12c25bcde8
3 changed files with 4 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

1
systems/x86_64-linux/attic/default.nix
View file

@ -6,6 +6,7 @@
imports = [
./hardware-configuration.nix
./atticd.nix
./headscale.nix
];
metacfg = {