← Back to context

Comment by sshine

1 day ago

I’d love to see a write-up on that.

Especially in the unlikely event that you used Nix for the deployment.

I've done exactly that: headscale in production at work, a few hundred client devices, infrastructure mostly powered by nix. What would you want to hear about it?

  • * Does it work well? * Do you recommend it? * Do your users care? * Is it difficult? Do you have to maintain it or is it basically set it and forget it? * What was memorable about setting it up? * Why did you go for Headscale vs Tailscale or Netbird or some other solution?

  • > headscale in production at work

      - How much effort do you put into key management compared to plain WireGuard?
      - How automated is the onboarding process; do you generate and hand over keys?
      - How do you cope without the commercial Tailscale dashboard?
      - Do you run some kind of dashboard or metrics system?
      - How long did it take to set up?
      - Were there any gotchas?