Hi @jossephus,
Thanks for building Chuchu! I'm really impressed by the Tailscale SSH workflow integration.
I'm writing to request a feature that would greatly expand Chuchu's usability for self-hosted enthusiasts: Support for connecting to a custom Headscale server (or any self-hosted Tailscale control plane).
Background:
Many of us run Headscale instead of Tailscale's official control server to keep our network metadata private and avoid vendor lock-in. While standard Tailscale SSH works great with the official SaaS, Headscale users currently have to rely on the system-level Tailscale/Headscale app to establish the tunnel, and then use a third-party SSH client on top of it—which defeats the purpose of having a "per-app" built-in tunnel.
Request:
Could Chuchu allow users to specify a custom control server URL (e.g., https://headscale.mydomain.com) and an API key or pre-auth key when setting up the WireGuard/Tailscale tunnel?
Benefits:
- Privacy & Control: Users can keep their device keys and network routes entirely on their own infrastructure.
- True All-in-One: Users wouldn't need to install the Headscale CLI or the official Tailscale app separately; Chuchu could handle the tunnel and the SSH connection in one place.
- Alignment with existing features: Since Chuchu already supports per-app WireGuard & Tailscale tunnels, adding a custom endpoint input field seems like a natural progression of that feature.
Just Haven OR Novascale.
Implementation ideas:
· Add a text field in the connection/profile settings labeled "Control Server URL" (defaulting to Tailscale's official endpoint if left blank).
· Allow input of a PreAuth Key for node registration, similar to how tailscale up --login-server works.
I'm happy to beta-test this if you decide to implement it. Thanks for considerings!
Hi @jossephus,
Thanks for building Chuchu! I'm really impressed by the Tailscale SSH workflow integration.
I'm writing to request a feature that would greatly expand Chuchu's usability for self-hosted enthusiasts: Support for connecting to a custom Headscale server (or any self-hosted Tailscale control plane).
Background:
Many of us run Headscale instead of Tailscale's official control server to keep our network metadata private and avoid vendor lock-in. While standard Tailscale SSH works great with the official SaaS, Headscale users currently have to rely on the system-level Tailscale/Headscale app to establish the tunnel, and then use a third-party SSH client on top of it—which defeats the purpose of having a "per-app" built-in tunnel.
Request:
Could Chuchu allow users to specify a custom control server URL (e.g., https://headscale.mydomain.com) and an API key or pre-auth key when setting up the WireGuard/Tailscale tunnel?
Benefits:
Just Haven OR Novascale.
Implementation ideas:
· Add a text field in the connection/profile settings labeled "Control Server URL" (defaulting to Tailscale's official endpoint if left blank).
· Allow input of a PreAuth Key for node registration, similar to how tailscale up --login-server works.
I'm happy to beta-test this if you decide to implement it. Thanks for considerings!