server_url: http://localhost:8080
listen_addr: 0.0.0.0:8080
metrics_listen_addr: 0.0.0.0:9090
grpc_listen_addr: 0.0.0.0:50443
grpc_allow_insecure: true

noise:
  private_key_path: /var/lib/headscale/noise_private.key

prefix_v4: 100.64.0.0/10
prefix_v6: fd7a:115c:a1e0::/48

derp:
  server:
    enabled: true
    region_id: 999
    region_code: "headscale"
    region_name: "Headscale Embedded DERP"
    stun_listen_addr: "0.0.0.0:3478"
    private_key_path: /var/lib/headscale/derp_server_private.key
    automatically_add_embedded_derp_region: true
    ipv4: 1.2.3.4
    ipv6: 2001:db8::1

  urls:
    - https://controlplane.tailscale.com/derpmap/default

  paths: []

  auto_update_enabled: true
  update_frequency: 24h

disable_check_updates: false
ephemeral_node_inactivity_timeout: 30m

node_update_check_interval: 10s

database:
  type: sqlite
  sqlite:
    path: /var/lib/headscale/db.sqlite

acls:
  mode: file
  policy_path: /etc/headscale/acl_policy.hujson

dns:
  magic_dns: true
  base_domain: iom.local
  nameservers:
    global:
      - 1.1.1.1
      - 8.8.8.8
    split:
      iom.local:
        - 100.100.100.100
  search_domains: []
  extra_records: []

unix_socket: /var/run/headscale/headscale.sock
unix_socket_permission: "0770"

log:
  format: text
  level: info

policy:
  mode: file
  path: /etc/headscale/acl_policy.hujson