No description
Find a file
2023-11-28 18:36:43 +01:00
.github/workflows Update dependencies 2023-11-25 14:21:36 +01:00
cmd/ts-restic-proxy Allow connection to tailnet directly via tsnet 2023-11-28 17:48:28 +01:00
.gitignore Add tracking of last repository access 2023-10-07 11:58:17 +02:00
default.nix add cache 2023-03-04 19:57:51 +01:00
default.nix.bak add cache 2023-03-04 19:57:51 +01:00
docker-compose.yml Fix Dockerfile and docker-compose to work with tsnet 2023-11-28 18:36:43 +01:00
Dockerfile Fix Dockerfile and docker-compose to work with tsnet 2023-11-28 18:36:43 +01:00
flake.lock add gomod2nix 2023-03-02 18:39:53 +01:00
flake.nix add gomod2nix 2023-03-02 18:39:53 +01:00
go.mod Allow connection to tailnet directly via tsnet 2023-11-28 17:48:28 +01:00
go.sum Allow connection to tailnet directly via tsnet 2023-11-28 17:48:28 +01:00
gomod2nix.toml add gomod2nix 2023-03-02 18:39:53 +01:00
LICENSE Initial commit 2023-03-01 17:15:24 +01:00
README.md Update README.md 2023-03-27 09:59:34 +02:00
shell.nix add gomod2nix 2023-03-02 18:39:53 +01:00

Tailscale Restic Proxy

An authentication proxy for the restic rest server using the Tailscale local client.

Project status

🐶 Under active use by developer

Features

  • Backups by Tailscale user or node without passwords
  • Compatible with Headscale

Usage

Server Setup

  • Start restic REST server (tested with Restic REST)
    • --private-repos recommended
    • set --htpasswd-file to path accessible to ts-restic-proxy
    • --path should be set, the default setting doesn't persist data
    • --listen 127.0.0.1:<restic-port>
    • HTTPS not supported
  • Start ts-restic-proxy
    • set --htpasswd-file to same path as restic server
    • --restic-rest-server localhost:<restic-port>
    • --proxy-non-tailscale to enable backups from local network

Initialize repository

restic init -r rest:http://<server-tailscale-ip>/ts/<user|node>/<subpath>