Understanding Headscale ACLs and Users
I spent quite a bit of time while I was learning Headscale being confused about users. Here are some key points that helped me understand them.
Using jq to help remove headscale nodes by name
Headscale CLI requires that you remove a node by id rather than name. jq to the rescue!
Connecting Android to Headscale
It’s a little tricky to connect android to Tailscale, but here’s how I do it using the Google Workspace authentication.
Headscale Authentication with Google Workspace
OIDC Logins to your Tailnet via Google
Headscale “users” can be authenticated using Google Workspace logins. This only applies to nodes that do not have tags. Nodes with tags do not get logged in/out via OIDC.