How do I log in to Headscale?

1. In the panel, open My servers and click your server.
2. On the Overview tab, wait for the App row to say "Headscale is ready". The page refreshes itself.
3. Copy the values from the Site address and Admin key rows.
4. Install the official Tailscale client on the device you want to connect (Linux, macOS or Windows).
5. On the device, open a terminal and run: tailscale up --login-server SITE-ADDRESS --authkey ADMIN-KEY.
6. The device joins the network. You can use the same key for every device. To see the devices, connect with SSH, run cd /opt/seturack/headscale, then docker compose exec headscale headscale nodes list.

Further down the page, the Username row and the Password row below it are for SSH. Don't use them to log in to Headscale.

Good to know

• Headscale has no web interface, devices and keys are managed with commands.
• Devices connect to each other directly. If a direct connection can't be made, traffic passes encrypted through Tailscale's public relay (DERP) servers.
• With your own domain, change Headscale's address too: set server_url in /opt/seturack/headscale/ayar/config.yaml to the new address and run docker compose restart headscale in /opt/seturack/headscale. Then run tailscale up --login-server NEW-ADDRESS --authkey ADMIN-KEY --force-reauth on each device.
• The site opens over HTTPS on a free sslip.io address based on your IP. If a certificate can't be issued, it opens over http:// instead. Only ports 80, 443 and 22 (for SSH) are open to the outside.

To use your own domain, see this article.

No server yet? Order a server with Headscale installed: you choose the size and pay for what you choose.