Connecting a Windows client

Goal

This documentation has the goal of showing how a user can use the official Windows Tailscale client with headscale.

To make the Windows client behave as expected and to run well with headscale, two registry keys must be set:

HKLM:\SOFTWARE\Tailscale IPN\UnattendedMode must be set to always to allow Tailscale to run properly in the background
HKLM:\SOFTWARE\Tailscale IPN\LoginURL must be set to <YOUR HEADSCALE URL> to ensure Tailscale contacts the correct control server.

The Tailscale Windows client has been observed to reset its configuration on logout/reboot and these two keys resolves that issue.

For a guide on how to edit registry keys, check out Computer Hope.

Download the Official Windows Client and install it.

When the installation has finished, start Tailscale and log in (you might have to click the icon in the system tray).

The log in should open a browser Window and direct you to your headscale instance.

If you are seeing repeated messages like:

[GIN] 2022/02/10 - 16:39:34 | 200 |    1.105306ms |       127.0.0.1 | POST     "/machine/redacted"

in your headscale output, turn on DEBUG logging and look for:

2022-02-11T00:59:29Z DBG Machine registration has expired. Sending a authurl to register machine=redacted

This typically means that the register keys above was not set appropriatly.

Ensure they are set correctly, delete Tailscale APP_DATA folder and try to connect again.