Deploy and configure Headscale server for lab VPN #783
Description
Set up a self-hosted Headscale server to manage Tailscale clients for lab operations.
Tasks:
- Choose hosting location (cloud/on-prem)
- Set up TLS and persistent storage
- Configure authentication (OIDC/manual)
- Integrate with DERP servers as needed
- Test connectivity and performance
- Document deployment steps
Acceptance Criteria:
- Headscale server operational and reachable
- Users can authenticate and connect via Tailscale
- Network ACLs validated
- Deployment steps documented