Skip to content

Commit

Permalink
Update reverse-proxy.md (#1986)
Browse files Browse the repository at this point in the history
Add blurb about how cloudflare proxy/tunnels is not supported/will not work
  • Loading branch information
kyhwana authored Jun 22, 2024
1 parent dfc089e commit 99e91a9
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions docs/reverse-proxy.md
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,10 @@ The reverse proxy MUST be configured to support WebSockets, as it is needed for

WebSockets support is required when using the headscale embedded DERP server. In this case, you will also need to expose the UDP port used for STUN (by default, udp/3478). Please check our [config-example.yaml](https://github.com/juanfont/headscale/blob/main/config-example.yaml).

### Cloudflare

Running headscale behind a cloudflare proxy or cloudflare tunnel is not supported and will not work as Cloudflare does not support WebSocket POSTs as required by the Tailscale protocol. See [this issue](https://github.com/juanfont/headscale/issues/1468)

### TLS

Headscale can be configured not to use TLS, leaving it to the reverse proxy to handle. Add the following configuration values to your headscale config file.
Expand Down

0 comments on commit 99e91a9

Please sign in to comment.