This version introduces a breaking change as it will now require an access control list in Tailscale. This is because tailmox now implements the Tailscale Services feature and autoApprovers.services must be set correctly in the ACL.

This version also expands on the original testing environment and introduces a way to easily deploy multiple Proxmox hosts to test tailmox with, and being able to revert those VMs back to state before the script is ran.

If you have previously tested out tailmox, you will need to update your ACL to include the following so that it works with Tailscale Services:

"autoApprovers": {
	"services": {
		"svc:tailmox": ["tag:tailmox"],
		"tag:tailmox": ["tag:tailmox"],
	},
},

• use the services feature of tailscale serve so that the tailmox cluster can be accessed via a standard services link (as opposed to a device link)
• deploy a virtual machine template in Proxmox of a semi-preconfigured Proxmox host that is ready for testing with tailmox

• perform installation of Tailscale between different Proxmox versions
• attempt initial ping reachability tests a few times
• make curl a dependency
• remove run_tailscale_cert_services function (removed in v1.2.0)

This version changes a core piece of architecture for tailmox - mainly that tailscale serve is now used as a reverse proxy for the pveproxy service, rather than managing the Tailscale certificate manually. This allows communication between hosts on port 443, meaning that URLs can now exclude the ":8006" port specification at the end. It also decouples Proxmox from Tailscale a bit, insomuch that binding the Tailscale certificate directly to pveproxy is no longer necessary.

Because of this change, tailscale-cert-services is no longer needed.

• switch to using tailscale serve to handle HTTP/API communication
• check that TCP 443 is available on all tailmox hosts (available via tailscale serve)
• ensure that the ping check tries a few times over a few seconds
• clean up unneccessary console output/logging

• add "💭 Mindfullness 💭" section to README
  • outlines considerations of latency
  • discusses performing ZFS replications

• add script logging to /var/log/tailmox.log
• add simple installation instructions in README.md
• add a document discussing recovering from split-brain (not finished)
• fix a few various issues

• test compatibility with Proxmox v9
• add a staging mode that installs Tailscale and retrieves the certificate, then stops
• bump tailscale-cert-services to v1.1.1
• fixes three separate things in issue #4

Full Changelog: v1.0.2...v1.1.0

• bump version of tailscale-cert-services to v1.1.0
• fix typo in README

Full Changelog: v1.0.1...v1.0.2

updates to the README

What's Changed

• update to README by @willjasen in #2

Full Changelog: v1.0.0...v1.0.1

Contributors

• @willjasen

This is a working version of tailmox that has been tested to work on three freshly installed Proxmox hosts.