Self-host with Docker · Yantr
Headscale
Self-hosted Tailscale control server for WireGuard mesh VPN.
1
Ports
3
Notes
3
Use Cases
About
What Headscale does
Headscale is an open-source, self-hosted implementation of the Tailscale control server. It gives you the power of Tailscale's mesh VPN — automatic NAT traversal, encrypted device-to-device connections, and access control — running entirely on your own infrastructure.
Install Flow
How to self-host Headscale
Headscale can be deployed with standard Docker Compose using the Yantr app catalog. This page collects the basic information searchers usually need first: what Headscale does, which Docker image Yantr uses, default ports, deployment notes, and where to find the original compose template.
After deployment, Yantr lets you publish additional ports from the stack page using Docker-style syntax. Use 8080:8080 for a fixed host port or just 8080 to let Docker assign a random port.
Use Cases
What people run it for
- Set up a self-hosted mesh VPN that connects all your devices with automatic NAT traversal and WireGuard encryption — no external accounts needed.
- Replace Tailscale's cloud control server with your own instance for full control over your network coordination.
- Define access control policies to control which devices can reach which services across your network.
Technical Details
Ports, image, and service metadata
Ports
| Port | Protocol | Label |
|---|---|---|
| 8080 | HTTP | Admin API |
Docker Image
headscale/headscale:latest
Service Name
headscale
Notes
Things to know before you deploy
- Headscale uses SQLite by default — no external database needed.
- Generate auth keys via 'headscale nodes generate-key' after deployment.
- Use Tailscale clients (tailscale up --login-server http://your-server) to join devices to your network.
Related Apps
More tools you might pair with Headscale
Page generated 2026-07-27T04:28:00.415Z