Headplane cannot work with Headscale when the listen address is 127.0.0.1

[azanke79]

Description

Hi All,

I used the basic docker compose file for the integrated method. I added the config.yaml to my folder. I commented out all OIDC section as I only what to test locally on my docker server. After both containers started I created an api key and used it to login on the web-ui (http://192.168.30.45:3000/admin). I always get an error that the api key is not valid. Do I need to provide the api key also in the config file or in the compose.yaml?

Thank you for your support.

services: headplane: # I recommend you pin the version to a specific release image: ghcr.io/tale/headplane:0.5.10 container_name: headplane restart: unless-stopped ports: - 3000:3000 volumes: - ./config.yaml:/etc/headplane/config.yaml - ./headscale-config/config.yaml:/etc/headscale/config.yaml - ./headplane-data:/var/lib/headplane - /var/run/docker.sock:/var/run/docker.sock:ro headscale: image: headscale/headscale:0.25.1 container_name: headscale restart: unless-stopped command: serve ports: - 8082:8080 volumes: - ./headscale-data:/var/lib/headscale - ./headscale-config:/etc/headscale networks: {}

Headplane Version

v0.5.10

Headscale Version

v.0.25.1

[tale]

Did you set server.cookie_secure to false.

[azanke79]

@tale yes, it is set to false. Here is my config.yaml

server: host: "0.0.0.0" port: 3000 cookie_secret: "844f50232c573b1e56359c0dc9195dd7" cookie_secure: false headscale: url: "http://headscale:8082" config_path: "/opt/stacks/tailscale/headscale-config/config.yaml" config_strict: true integration: docker: enabled: true container_name: "headscale" socket: "unix:///var/run/docker.sock" kubernetes: enabled: false

[tale]

You shouldn't need to, are you running it behind a reverse proxy or anything, and are you sure you are pasting the API key without any extra spaces or any incorrect characters?

[azanke79]

No, I am not using any reverse proxy. I am just using the the docker server ip to get to the admin panel:

http://192.168.30.45:3000/admin

The api is generated on the docker server cli using: docker exec headscale headscale apikeys create --expiration 999d

This is what the key looks like: YNdP9jT.KHB35XMxmIVvTND9hxc7TTi1kbdqxZZU

If I check the keys with: docker exec headscale headscale apikeys list it is listed.

Do I need to adjust the basic config.yaml for headscale with an special setting?

Thanks for your help!

[azanke79]

I got the api key to work. I had to change my listen_addr in the headscale config.yaml:

from:
listen_addr: 127.0.0.1:8080

to:
listen_addr: 0.0.0.0:8080

I got access to the web-ui using http://192.168.30.45:3000/admin/

Now I am only missing the DNS and Settings Tab in the web-ui.

What I also saw in the ui is, that my user is marked as: Unmanaged and not as Owner. Is that maybe the reason. I only have one user at the moment. Is there a way to change the user role?

[tale]

Unmanaged means it isn't done via OIDC. Headplane can't really do much with users if you're signing in with API keys. I can definitely figure out better user management in the future, but it isn't really on my roadmap right now since the "ideal path" for Headplane is to use OIDC for both Headscale and Headplane, making sure to use the same OIDC client.