BREAKING
- Old ACL syntax is no longer supported ("users" & "ports" -> "src" & "dst"). Please check the new syntax.
Changes
- Drop armhf (32-bit ARM) support. #609
- Headscale fails to serve if the ACL policy file cannot be parsed #537
- Fix labels cardinality error when registering unknown pre-auth key #519
- Fix send on closed channel crash in polling #542
- Fixed spurious calls to setLastStateChangeToNow from ephemeral nodes #566
- Add command for moving nodes between namespaces #362
- Added more configuration parameters for OpenID Connect (scopes, free-form paramters, domain and user allowlist)
- Add command to set tags on a node #525
- Add command to view tags of nodes #356
- Add --all (-a) flag to enable routes command #360
- Fix issue where nodes was not updated across namespaces #560
- Add the ability to rename a nodes name #560
- Node DNS names are now unique, a random suffix will be added when a node joins
- This change contains database changes, remember to backup your database before upgrading
- Add option to enable/disable logtail (Tailscale's logging infrastructure) #596
- This change disables the logs by default
- Use [Prometheus]'s duration parser, supporting days (
d), weeks (w) and years (y) #598 - Add support for reloading ACLs with SIGHUP #601
- Use new ACL syntax #618
- Add -c option to specify config file from command line #285 #612
- Add configuration option to allow Tailscale clients to use a random WireGuard port. kb/1181/firewalls #624
- Improve obtuse UX regarding missing configuration (
ephemeral_node_inactivity_timeoutnot set) #639 - Fix nodes being shown as 'offline' in
tailscale status#648 - Improve shutdown behaviour #651
- Drop Gin as web framework in Headscale 648 677
- Make tailnet node updates check interval configurable #675
- Fix regression with HTTP API #684