No description
| .github/workflows | ||
| cmd/ts-restic-proxy | ||
| .gitignore | ||
| default.nix | ||
| default.nix.bak | ||
| docker-compose.yml | ||
| Dockerfile | ||
| flake.lock | ||
| flake.nix | ||
| go.mod | ||
| go.sum | ||
| gomod2nix.toml | ||
| LICENSE | ||
| README.md | ||
| shell.nix | ||
Tailscale Restic Proxy
An authentication proxy for the restic rest server using the Tailscale local client.
Project status
✅ 🐶 Under active use by developer
Features
- Backups by Tailscale user or node without passwords
- Compatible with Headscale
Usage
Server Setup
- Start restic REST server (tested with Restic REST)
--private-reposrecommended- set
--htpasswd-fileto path accessible to ts-restic-proxy --pathshould be set, the default setting doesn't persist data--listen 127.0.0.1:<restic-port>- HTTPS not supported
- Start ts-restic-proxy
- set
--htpasswd-fileto same path as restic server --restic-rest-server localhost:<restic-port>--proxy-non-tailscaleto enable backups from local network
- set
Initialize repository
restic init -r rest:http://<server-tailscale-ip>/ts/<user|node>/<subpath>