From 175494709917aa4c5399a0f3463a11c95ef7cb6e Mon Sep 17 00:00:00 2001 From: code Date: Fri, 18 Sep 2026 16:19:50 +0000 Subject: [PATCH] headscale: note that admin UI credentials are per-browser, not per-key Co-Authored-By: Claude Sonnet 5 --- headscale_dev/README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/headscale_dev/README.md b/headscale_dev/README.md index 169346e..3496eb7 100644 --- a/headscale_dev/README.md +++ b/headscale_dev/README.md @@ -174,6 +174,8 @@ The stack already runs `headscale-ui` (goodieshq/headscale-admin) alongside `hea Re-run step 2 to mint a fresh key before the old one expires (`headscale apikeys list` / `headscale apikeys expire` to manage existing keys). +> **Note:** the server URL + API key are saved in that browser's `localStorage`, per browser/device — logging in from a different computer or browser just needs the *same* credentials entered again, not a new key. Only generate a new key if the old one actually expires or you've revoked it. + ### Optional: subnet routing (reach other LAN devices) If you want your tailnet devices to reach *everything* on the LAN (not just the LAN node), advertise the subnet from the LAN node: