3 ms·
It looks like I need to regenerate the auth key every 90 days, which kind of kills this for me. I definitely don't want to have to update all my docker stuff e
by wccrawford 3y ago
It looks like I need to regenerate the auth key every 90 days, which kind of kills this for me. I definitely don't want to have to update all my docker stuff every 90 days, and it's almost assuredly going to go offline right when I can't deal with it.
- zrail 3y agoThe trick is to persist the tailscale var volume. The auth key is only used when setting up a particular client the first time, once it's connected to your network the auth key is irrelevant. If you're doing this with ephemeral containers then yes you'll need a way to roll auth keys. OAuth credentials don't expire and Tailscale has a command line single purpose tool to get an auth key given OAuth credentials, so that can be a viable alternative. https://tailscale.com/kb/1215/oauth-clients/#get-authkey-utility https://tailscale.com/kb/1215/oauth-clients/#get-authkey-uti...
- wccrawford 3y agoOh, that makes a huge difference, then. I had wondered why anything needed to be persistent. Thanks!