Publish privacy-safe Headscale deployment examples

traefik/dynamic/headscale.yml.example

@@ -0,0 +1,25 @@
+http:
+  routers:
+    headplane:
+      rule: "Host(`headscale.example.com`) && PathPrefix(`/admin`)"
+      entryPoints: [websecure]
+      service: headplane
+      priority: 100
+      tls:
+        certResolver: le
+    headscale:
+      rule: "Host(`headscale.example.com`)"
+      entryPoints: [websecure]
+      service: headscale
+      priority: 10
+      tls:
+        certResolver: le
+  services:
+    headscale:
+      loadBalancer:
+        servers:
+          - url: http://headscale:8080
+    headplane:
+      loadBalancer:
+        servers:
+          - url: http://headplane:3000

traefik/traefik.yml.example

@@ -0,0 +1,33 @@
+api:
+  dashboard: false
+
+ping: {}
+
+log:
+  level: INFO
+
+accessLog: {}
+
+entryPoints:
+  web:
+    address: ":80"
+    http:
+      redirections:
+        entryPoint:
+          to: websecure
+          scheme: https
+  websecure:
+    address: ":443"
+
+providers:
+  file:
+    directory: /etc/traefik/dynamic
+    watch: true
+
+certificatesResolvers:
+  le:
+    acme:
+      email: admin@example.com
+      storage: /letsencrypt/acme.json
+      httpChallenge:
+        entryPoint: web