feat: change headscale-ui tls to dns cloudflare

Author: juev

accessories/headscale/Caddyfile

@@ -1,4 +1,9 @@
-https://example.org:443 {
+https://ns.juev.org:8443 {
     reverse_proxy /web* http://headscale-ui:8080
     reverse_proxy * http://headscale:8080
+
+    tls {
+        dns cloudflare {env.CF_API_TOKEN}
+        resolvers 1.1.1.1
+    }
 }

accessories/headscale/Dockerfile

@@ -0,0 +1,8 @@
+FROM caddy:builder AS caddy-builder
+
+RUN xcaddy build \
+    --with github.com/caddy-dns/cloudflare
+
+FROM caddy:alpine
+
+COPY --from=caddy-builder /usr/bin/caddy /usr/bin/caddy

accessories/headscale/docker-compose.yaml

@@ -1,11 +1,10 @@
 services:
-
   headscale:
     container_name: headscale
     image: headscale/headscale:latest
     restart: unless-stopped
     # ports:
-      # - 8080:8080
+    # - 8080:8080
     volumes:
       - ./config:/etc/headscale
       - ./data:/var/lib/headscale
@@ -17,11 +16,14 @@ services:
     restart: unless-stopped
 
   caddy:
-    image: caddy:alpine
+    # image: caddy:alpine
+    build: .
     restart: unless-stopped
     ports:
-      - "80:80"
-      - "443:443"
-      - "443:443/udp"
+      # - "80:80"
+      - "8443:8443"
+      - "8443:8443/udp"
     volumes:
-      - ./Caddyfile:/etc/caddy/Caddyfile
+      - ./Caddyfile:/etc/caddy/Caddyfile
+    environment:
+      - CF_API_TOKEN=token