Aaron Bieber 69d77f6e9d Add a 'tls_letsencrypt_listen' config option ... Currently the default (and non-configurable) Let's Encrypt listener will bind to all IPs. This isn't ideal if we want to run headscale on a specific IP only. This also allows for one to set the listener to something other than port 80. This is useful for OSs like OpenBSD which only allow root to bind the lower port ranges (and don't have `setcap`) as we can now run `headscale` as a non-privileged user while still using the baked in ACME magic. Obviously this configuration would also require a reverse proxy or firewall rule to redirect traffic. I attempted to outline that in the README change.		2021-07-23 16:12:01 -06:00
..
headscale	Add a 'tls_letsencrypt_listen' config option	2021-07-23 16:12:01 -06:00