This guide is based on using an Ubuntu VM. The whole process will take several hours when doing for the first time. I faced issues with Windows 11, but you are free to try it. There are helpful comments below for Windows users.
Please read all the steps first before proceeding.
This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.
Update: I've disabled comments as of 2025-01-26 to avoid everyone having notifications for something a year on if someone wants to suggest a correction. Folks are free to email to suggest corrections still, of course.
This document descrives the process of setting up headscale with swag, using letsencrypt certs.
This assumes you have a subdomain (e.g. wg.example.com) pointing to your SWAG instance and want to use it as a reverse proxy.
Add the subdomain for your desired headscale domain to your .env file.
For example:
SWAG_EXTRA_DOMAINS=wg.example.com
This is write up is on how to port forward over wireguard. I am going to be port forwarding a mail server running MailCow on my local server, but really any service can be port forwared with some modifications to the IPTables commands in the wireguard file.
I am using a cheap Vultr VPS as my proxy server, if your intrested heres a referral link https://www.vultr.com/?ref=9019507 where I get $10 or if you plan to spend more then $35 on your account you will get $100 and I will get $35 https://www.vultr.com/?ref=9019508-8H
| # We'll be installing Homebrew in the /opt directory. | |
| cd /opt | |
| # Create a directory for Homebrew. This requires root permissions. | |
| sudo mkdir homebrew | |
| # Make us the owner of the directory so that we no longer require root permissions. | |
| sudo chown -R $(whoami) /opt/homebrew | |
| # Download and unzip Homebrew. This command can be found at https://docs.brew.sh/Installation. |
| using namespace System.Management.Automation | |
| Register-ArgumentCompleter -CommandName ssh,scp,sftp -Native -ScriptBlock { | |
| param($wordToComplete, $commandAst, $cursorPosition) | |
| $knownHosts = Get-Content ${Env:HOMEPATH}\.ssh\known_hosts ` | |
| | ForEach-Object { ([string]$_).Split(' ')[0] } ` | |
| | ForEach-Object { $_.Split(',') } ` | |
| | Sort-Object -Unique | |
| # For now just assume it's a hostname. |
| #!/usr/bin/env sh | |
| # Copyright 2020 glaszig | |
| # Permission is hereby granted, free of charge, to any person obtaining a copy | |
| # of this software and associated documentation files (the "Software"), to deal | |
| # in the Software without restriction, including without limitation the rights | |
| # to use, copy, modify, merge, publish, distribute, sublicense, and/or sell | |
| # copies of the Software, and to permit persons to whom the Software is | |
| # furnished to do so, subject to the following conditions: |
| 1. Take a backup of docker.service file. | |
| $ cp /lib/systemd/system/docker.service /lib/systemd/system/docker.service.orig | |
| 2. Modify /lib/systemd/system/docker.service to tell docker to use our own directory | |
| instead of default /var/lib/docker. In this example, I am using /p/var/lib/docker | |
| Apply below patch. | |
| $ diff -uP -N /lib/systemd/system/docker.service.orig /lib/systemd/system/docker.service | |
| --- /lib/systemd/system/docker.service.orig 2018-12-05 21:24:20.544852391 -0800 |
| # -*- coding: utf-8 -*- | |
| """ rwlock.py | |
| A class to implement read-write locks on top of the standard threading | |
| library. | |
| This is implemented with two mutexes (threading.Lock instances) as per this | |
| wikipedia pseudocode: | |
| https://en.wikipedia.org/wiki/Readers%E2%80%93writer_lock#Using_two_mutexes |