Deploy headscale

terraform/casey_vps.tf

@@ -73,6 +73,24 @@ resource "linode_firewall" "casey" {
     ipv4     = ["0.0.0.0/0"]
     ipv6     = ["::/0"]
   }
+
+  inbound {
+    label    = "allow-inbound-headscale"
+    action   = "ACCEPT"
+    protocol = "UDP"
+    ports    = "41641"
+    ipv4     = ["0.0.0.0/0"]
+    ipv6     = ["::/0"]
+  }
+
+  inbound {
+    label    = "allow-inbound-stun"
+    action   = "ACCEPT"
+    protocol = "UDP"
+    ports    = "3478"
+    ipv4     = ["0.0.0.0/0"]
+    ipv6     = ["::/0"]
+  }
 }
 
 resource "linode_rdns" "casey_reverse_ipv4" {

terraform/jakehoward.tech.tf

@@ -245,6 +245,14 @@ resource "cloudflare_record" "jakehowardtech_ntfy" {
   ttl     = 1
 }
 
+resource "cloudflare_record" "jakehowardtech_headscale" {
+  zone_id = cloudflare_zone.jakehowardtech.id
+  name    = "headscale"
+  value   = cloudflare_record.sys_domain_casey.hostname
+  type    = "CNAME"
+  ttl     = 1
+}
+
 resource "cloudflare_record" "jakehowardtech_caa" {
   zone_id = cloudflare_zone.jakehowardtech.id
   name    = "@"