headscale-deploy
Installation
SKILL.md
headscale-deploy
Overview
Headscale is an open-source, self-hosted implementation of the Tailscale control server. It allows you to run your own coordination plane for WireGuard-based mesh networking, giving you full control over your tailnet without relying on Tailscale's SaaS infrastructure. The Tailscale client connects to Headscale transparently — no client modifications needed.
Use this skill to deploy Headscale from scratch, configure server settings, manage DERP relay infrastructure, and diagnose deployment issues.
Prerequisites
- Linux server (x86_64 or aarch64) or Docker host with compose support
- DNS record pointing to the server (A/AAAA record for
server_url) - Ports 80/443 accessible from the internet (or your tailnet's ingress point)
- Port 3478/udp for STUN (optional, needed for NAT traversal)
- Root or sudo access on the target machine