localghost v3.3.0

Tailnet hosting now tells applications who is visiting, follows the machine it runs on, and can move to another suffix without re-enrolling.

• Tailnet identity. Applications receive the Tailscale-User-Login, Tailscale-User-Name and Tailscale-User-Profile-Pic headers Tailscale Serve would set, so a shared development app can recognize a teammate without its own sign-in. See Tailnet identity.
• Named after the machine. A new enable calls the gateway localghost-<machine> after this machine's tailnet name, and defaults the suffix to that short name (shop.wrk on a machine named wrk), so each hosting machine gets its own suffix. Existing gateways keep their names.
• Switch suffix in place. localghost tailscale enable --suffix <new> moves a running hub's routes to another suffix on the same gateway device: no new auth key and no offline device left behind. After renaming the machine in the admin console, a plain enable follows it.
• Clearer tailnet commands. tailscale disable explains a missing credential instead of showing a bare prompt, trust commands check for mkcert before doing any work, and tailscale status names the sites to trust (Trust https://*.wrk on other machines).
• Tidier run output. The run summary is headed by the app (Running shop (django)), Ctrl+C reports Stopped shop. rather than a failure, and warnings no longer print in framed boxes.

Upgrade with:

uvx --refresh localghost

See the changelog for the full list.