• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.

Issue Headscale on Plesk/Client Unable to Reach Server/Firewall Configs

dmcgrat4

New Pleskian
Hi all!

I am currently trying to set up Headscale( a self-host alternative to the Tailscale control server) on the Plesk server and am facing some issues that I believe have to do with being able to reach the port on the server and wanted to see if anyone had any suggestions. I will provide more information on how I set up the headscale server/logs for more background.

Currently, I am able to run the docker container to set up headscale on

Code:
docker ps
CONTAINER ID   IMAGE                        COMMAND                  CREATED         STATUS         PORTS                                                                 NAMES
8dfad3abf301   headscale/headscale:0.23.0   "/ko-app/headscale s…"   5 seconds ago   Up 4 seconds   0.0.0.0:8080->8080/tcp, :::8080->8080/tcp, 127.0.0.1:9090->9090/tcp   headscale

docker logs --follow headscale
2024-09-25T17:35:47Z WRN
WARN: The "dns.use_username_in_magic_dns" configuration key is deprecated and has been removed. Please see the changelog for more details.

2024-09-25T17:35:47Z INF Opening database database=sqlite3 path=/var/lib/headscale/db.sqlite
2024-09-25T17:35:47Z INF Setting up a DERPMap update worker frequency=86400000
2024-09-25T17:35:47Z INF listening and serving HTTP on: 0.0.0.0:8080
2024-09-25T17:35:47Z INF listening and serving debug and metrics on: 127.0.0.1:9090

For the server_url (that is set up on the headscale configs) I set it to http://<public ip>:8080
This is how the client machine should reach the server/docker headscale

However, trying to reach this docker server by client it just times out on the client machine:

Code:
tailscale up --login-server http://<public ip>:8080

This leads me to think that there is something with the firewall on the Plesk that needs to be reconfigured (as nothing appears in the docker logs). I wanted to see if anyone had any ideas/experience with opening these ports or if there was any advice to fix this.

Super appreciate anyone that might have any ideas or fixes for this!
 
Back
Top