Skip to content

Headscale Easy

Headscale Easy

Headscale, with everything around it.
A deployment and management layer for Headscale: a Compose app, HTTPS, accounts and sign-in, a Tailscale-style web console and backups. One container, one command to install.

Get started GitHub Buy me a coffee on Ko-fi

Headscale Easy — Machines

Security notice

This is security-sensitive networking software, and a young project with one maintainer. AI-assisted development was used extensively (AI usage) and there has been no independent security audit. Review and harden your deployment before exposing it to the Internet: see Security and Production and hardening.

Headscale works well on its own; what takes time is the glue around it — auth, DNS, HTTPS, device management and backups. Headscale Easy runs the official, unmodified Headscale and packages that glue, much like wg-easy does for WireGuard: one container, set up from your browser and managed from a console modelled on Tailscale's admin panel. Use the official Tailscale apps on every device; only the server is yours.

Features

  • Tailscale-style console

    Machines, users, DNS, access controls and keys at /console. Dark and light themes, works on phones.

  • Real user accounts

    Passwords with two-factor, invitations and sign-up built in, or your own OIDC provider (Authentik, Keycloak, Pocket ID, Google).

  • A private VPN per user

    Members only see and reach their own devices; admins manage everything.

  • Routes and exit nodes

    Approve subnet routes and exit nodes, edit tags, expire keys, rename, filter and export machines.

  • DNS and ACLs

    MagicDNS, nameservers, split DNS and the HuJSON policy — validated before they are applied.

  • HTTPS your way

    Let's Encrypt, self-signed, behind your existing proxy (ready-made snippets), or plain HTTP on a LAN.

  • English, Spanish, French, German and Portuguese

    In the console, in English and Spanish. More languages welcome.

  • Lightweight

    The console is plain Python standard library: no build step, no JS framework, no database server: one container, about 70 MB of RAM.

Screenshots

Machine details

Machines, light theme

Users

DNS

Access controls

Keys

Sign in

Support the project

Headscale Easy is built and maintained in my spare time by Rafa Madolell. If it saves you time or money, ⭐ star the repository and ☕ buy me a coffee on Ko-fi.

Headscale Easy is an independent project, not affiliated with Tailscale Inc. or the Headscale project. "Tailscale" is a trademark of Tailscale Inc.