DevOps

Deploy and manage a self-hosted Tailscale ecosystem using Headscale as the open-source control server. Includes infrastructure setup, policy configuration, client onboarding, routing, and backup.

Provides scripts to backup, restore, and migrate Headscale installations, including SQLite database, configuration, policy, and certificates. Useful before upgrades or for disaster recovery.

Deploy, configure, and maintain a self-hosted Headscale control server for WireGuard-based mesh networking. Includes setup, DERP relay configuration, and health checks.

Configure and manage DERP relay servers for Tailscale and Headscale networks. Use when direct peer-to-peer connections fail due to NAT or firewall restrictions.

Configures subnet routers and exit nodes in a Headscale tailnet to extend LAN subnet access to non-Tailscale devices and route internet traffic through a home server for privacy on untrusted networks.

Author, test, and deploy Tailscale-compatible huJSON policy files for Headscale control. Manages ACLs, grants, tags, SSH rules, and auto-approvers with validation tests.

Install, configure, and troubleshoot the Tailscale client to connect devices to a Headscale VPN. Covers authentication, diagnostics, and common gotchas for secure mesh networking.

Create C4 software-architecture diagrams using Mermaid or Structurizr. Use when teams need clear system context, container, component, or code-level views.