🌐 Headscale Dynamic Gateway

Manage public exposure with port-based subdomain routing: <port>.<machine>.<domain>:<port>

⚠️ Gateway not configured. Please configure your Headscale API settings.

Total Machines

0

Online

0

Exposed

0

Total Ports

0

Protected

0

Loading machines...

No Machines Found

Connect machines to your Headscale network and they'll appear here automatically.

Gateway Configuration

Headscale URL Your Headscale server URL

API Key Generate with: headscale apikeys create

Public Domain Your public domain (e.g., gateway.pulsedwh.app). DNS must support two-level wildcard: *.*.domain

Poll Interval (seconds) How often to check for new machines

🔒 Global Security Settings

Global IP Whitelist applies to ALL exposed machines unless they have their own whitelist configured. If no IPs are configured, all IPs are allowed (open access).

Global IP Whitelist Enter IP addresses or CIDR ranges (e.g., 203.0.113.45 or 192.168.1.0/24)

🔒 Security for

Machine-specific IP whitelist overrides the global whitelist. Leave empty to use the global whitelist instead.

IP Whitelist for this Machine Enter IP addresses or CIDR ranges

HTTP/HTTPS: Uses HTTP Basic Authentication
TCP ports: Uses challenge-response protocol (send password on connect)

Set Password

Confirm Password