Brad Fitzpatrick ca774c3249 ipn/ipnserver: add TS_PERMIT_CERT_UID envknob to give webservers cert access ...

So you can run Caddy etc as a non-root user and let it have access to
get certs.

Updates caddyserver/caddy#4541

Change-Id: Iecc5922274530e2b00ba107d4b536580f374109b
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>

2022-01-25 12:12:41 -08:00

..

ipnlocal

wgengine/netstack: add an SSH server experiment

2022-01-24 19:14:13 -08:00

ipnserver

ipn/ipnserver: add TS_PERMIT_CERT_UID envknob to give webservers cert access

2022-01-25 12:12:41 -08:00

ipnstate

ipn/ipnstate: remove old deprecated TailAddr IPv4-only field

2021-12-09 09:28:23 -08:00

localapi

ipn/ipnserver: add TS_PERMIT_CERT_UID envknob to give webservers cert access

2022-01-25 12:12:41 -08:00

policy

ipn/policy: treat DNS service as interesting so it's not filtered out

2021-12-03 12:55:54 -08:00

store/aws

ipn/store/aws: support using sub-paths in parameters

2021-11-29 07:48:01 -08:00

backend.go

ipn: use key.NodePublic instead of tailcfg.NodeKey

2021-11-01 20:32:10 -07:00

doc.go

Move Linux client & common packages into a public repo.

2020-02-09 09:32:57 -08:00

fake_test.go

ipn{,/ipnlocal}, cmd/tailscale/cli: don't check pref reverts on initial up

2021-04-18 08:12:18 -07:00

handle.go

ipn: another controlplane synonym

2021-07-13 08:22:10 -07:00

message_test.go

ipn: allow b to be nil in NewBackendServer

2021-05-19 09:33:19 -07:00

message.go

ipn: don't log IPN messages that may contain an authkey.

2021-09-22 20:32:49 -07:00

prefs_clone.go

wgengine/netstack: add an SSH server experiment

2022-01-24 19:14:13 -08:00

prefs_test.go

wgengine/netstack: add an SSH server experiment

2022-01-24 19:14:13 -08:00

prefs.go

wgengine/netstack: add an SSH server experiment

2022-01-24 19:14:13 -08:00

store_test.go

ipn: test TestFileStore in a fresh subdirectory

2021-09-24 15:05:10 -07:00

store.go

ipn: remove mention of wgkey in comment.

2021-10-28 10:40:44 -07:00