Publish privacy-safe Headscale deployment examples

headplane/config/config.yaml.example

@@ -0,0 +1,37 @@
+server:
+  host: 0.0.0.0
+  port: 3000
+  base_url: https://headscale.example.com
+  cookie_secret: REPLACE_WITH_OPENSSL_RAND_HEX_32
+  cookie_secure: true
+  data_path: /var/lib/headplane
+
+headscale:
+  url: http://headscale:8080
+  public_url: https://headscale.example.com
+  config_path: /etc/headscale/config.yaml
+  config_strict: true
+  api_key: REPLACE_WITH_HEADSCALE_API_KEY
+
+# Optional OIDC example. Uncomment only in the ignored config.yaml file.
+# oidc:
+#   issuer: https://auth.example.com/application/o/headscale/
+#   client_id: REPLACE_WITH_OIDC_CLIENT_ID
+#   client_secret: REPLACE_WITH_OIDC_CLIENT_SECRET
+#   use_pkce: true
+#   scope: openid email profile groups headplane_role
+#   default_role: member
+#   role_claim: headplane_role
+
+integration:
+  agent:
+    enabled: false
+  docker:
+    enabled: true
+    container_label: me.tale.headplane.target=headscale
+    socket: unix:///var/run/docker.sock
+  kubernetes:
+    enabled: false
+    pod_name: ""
+  proc:
+    enabled: false