Headscale DERP

by magnus919

Headscale DERP is a DevOps skill for Claude Code, published by magnus919 in agent-skills.

40 stars6 forkson magnus919/agent-skillsAdded 2026/07/18+18% in starsRepository updated 2026/08/11

View source on GitHub Download repo ZIP

agent-skillsagentskillsai-agentsautomationllm

Install in seconds

Install Headscale DERP

Copy Headscale DERP into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/magnus919/agent-skills/tree/main/bundles/tailscale/skills/headscale-derp ~/.claude/skills/headscale-derp

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/magnus919/agent-skills.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: bundles/tailscale/skills/headscale-derp/SKILL.md in magnus919/agent-skills
Installs to: ~/.claude/skills/headscale-derp
Collection: One of 33 skills cataloged from this repository
Category: DevOps — 1075 skills

What Headscale DERP does

Configures and manages DERP relay servers for Tailscale/Headscale, covering embedded and standalone setups, TLS, and connectivity testing. Use when setting up relay for NAT traversal failures.

Headscale DERP is cataloged under DevOps on DirSkills. Headscale DERP comes from a repository tagged agent-skills, agentskills, ai-agents, automation and llm.

Documentation

README

Excerpt

DERP = Designated Encrypted Relay Protocol. DERP is Tailscale's TURN-like fallback mechanism used when direct peer-to-peer NAT traversal fails. Traffic through DERP is fully encrypted (WireGuard inside TLS), but it routes through a relay server rather than directly between peers, so it introduces additional latency.

Common scenarios where DERP is used:

Symmetric NAT — Both peers behind symmetric NAT gateways
Corporate firewalls — Restrictive egress policies that block UDP/STUN
Double NAT — Carrier-grade NAT on both sides
Blocked STUN — UDP port 3478 is filtered

DERP in Headscale

Headscale includes an embedded DERP server that is enabled by default in the config.yaml:

This is the opening of the README. Read the full README on GitHub.

Frequently asked about Headscale DERP

What else does magnus919 publish alongside Headscale DERP?
Headscale DERP is one of 33 skills that DirSkills catalogs from magnus919/agent-skills, the repository it ships in. Its siblings there include ADR Authoring, API Design and Evolution and ARR CLI. Each one is a separate skill with its own page in this directory, installs the same way Headscale DERP does, and is maintained by magnus919 in that same repository. The rest of the collection is listed on the magnus919/agent-skills page.
How does Headscale DERP compare to other DevOps skills?
Headscale DERP ranks #1033 by stars among the 1075 DevOps skills in this catalog. The most-starred ones next to it are Backend Patterns, API Connector Builder and Migration. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Headscale DERP against them. Open each page to compare what they document and how they install.