matt/echo6-docs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

auto: docs sync 2026-06-30T12:00:07+00:00

Browse source 
Files changed: engine/changelog.md engine/lint-report.md vault/.obsidian/workspace.json vault/runbooks/headscale-onboard-node.md
This commit is contained in:
echo6-autocommit 2026-06-30 12:00:07 +00:00
commit fe1acbda79
4 changed files with 14 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

12
vault/runbooks/headscale-onboard-node.md
View file

@ -10,22 +10,22 @@ related:
- [[caddy]]
- [[meshtastic-headscale-runbook]]
- [[lxc-service-migration]]
updated: 2026-06-18
updated: 2026-06-30
---
# Headscale / Tailscale — Onboard a New Node
Standard procedure to bring any new system (Proxmox host, bare-metal, VM, or LXC) onto the Echo6 tailnet.
## Overview
- **Control server:** Headscale on Contabo — `ssh root@100.64.0.1`, Docker container `headscale`.
- **Control server:** Headscale on **edge2 CT107** — `ssh edge2` then `sudo pct exec 107 -- docker exec headscale headscale <cmd>`, Docker container `headscale`. (Migrated off Contabo 2026-06-19.)
- **Login server:** `https://vpn.echo6.co` · **Admin UI (Headplane):** `https://vpn.echo6.co/admin`
- **User/namespace:** all Echo6 nodes join `echo6` (user ID 1).
- **MagicDNS base domain:** `echo6.mesh` (e.g. `ping data.echo6.mesh`).
- **Naming:** lowercase, hyphens OK, no dots/underscores. Matches `--hostname` and the cortex SSH alias.
## 1. Generate a preauth key (on Contabo)
## 1. Generate a preauth key (on edge2 CT107)
```bash
ssh root@100.64.0.1 'docker exec headscale headscale preauthkeys create --user echo6 --reusable --expiration 1h'
ssh edge2 "sudo pct exec 107 -- docker exec headscale headscale preauthkeys create --user echo6 --reusable --expiration 1h"
# If the name form errors, use the user ID: --user 1
```
@ -71,7 +71,7 @@ tailscale up --login-server=https://vpn.echo6.co --auth-key=<KEY> --hostname=<NA
```bash
tailscale status
tailscale ip -4
ssh root@100.64.0.1 'docker exec headscale headscale nodes list' # confirm node + assigned 100.64.0.x
ssh edge2 "sudo pct exec 107 -- docker exec headscale headscale nodes list" # confirm node + assigned 100.64.0.x
```
Headscale assigns the IP **sequentially at registration** — don't pre-assign; read it back here.
@ -103,7 +103,7 @@ Proxmox host on Contabo. Preauth key → `tailscale up --login-server=https://vp
## Checklist
```
[ ] Preauth key generated on Contabo (user echo6)
[ ] Preauth key generated on edge2 CT107 (user echo6)
[ ] Tailscale installed + tailscaled enabled
[ ] DNS-bootstrap drop-in in place (LXC: required)
[ ] (LXC) TUN device added to CT config