vh/esh-pfi-infrastructure
1
0
Fork 0
Code Issues 7 Pull Requests Actions Packages Projects Releases Wiki Activity

docs(mesh): first roaming client (vhlk-mba26) verified

Browse Source
This commit is contained in:
vh
2026-09-05 22:58:23 -07:00
parent a8a6f24b56
commit 7382fdaa7b
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/pfi/headscale-mesh-plan.md
+8
View File
@@ -190,3 +190,11 @@ the app at `https://headscale.phasefinal.com`, it opens a registration page show
`headscale nodes register --user pfi --key mkey:…` command; run that on nh3-headscale `headscale nodes register --user pfi --key mkey:…` command; run that on nh3-headscale
(`pct exec 106 -- headscale nodes register --user 1 --key <mkey>`). CLI Linux/macOS builds can (`pct exec 106 -- headscale nodes register --user 1 --key <mkey>`). CLI Linux/macOS builds can
use the vaulted client key instead. use the vaulted client key instead.
### 06:20Z — first roaming client verified
Operator's MacBook enrolled via the GUI (Option-click → Debug → Custom Login Server; headscale
0.29 registration command is `headscale auth register --auth-id hskey-authreq-… --user pfi`),
node 5 `vhlk-mba26` (100.64.0.5), "Use Tailscale subnets" on. From ESH: `ping 100.64.0.3`
and `ssh infra-ops@ana-docker.ana.internal` both work → colo subnet route + split DNS for
`*.internal` proven from a client. (Path was still via the ESH LAN / old tunnels.)