🌐 Headscale Dynamic Gateway

Manage public exposure with port-based subdomain routing: <port>.<machine>.<domain>:<port>

⚠️ Gateway not configured. Please configure your Headscale API settings.

Total Machines

0

Online

0

Exposed

0

Total Ports

0

Protected

0

Loading machines...

No Machines Found

Connect machines to your Headscale network and they'll appear here automatically.

Gateway Configuration

Headscale URL Your Headscale server URL

API Key Generate with: headscale apikeys create

Public Domain Your public domain (e.g., gateway.pulsedwh.app). DNS must support two-level wildcard: *.*.domain

Poll Interval (seconds) How often to check for new machines

🔒 Global Security Settings

Global IP Whitelist applies to ALL exposed machines unless they have their own whitelist configured. If no IPs are configured, all IPs are allowed (open access).

Global IP Whitelist Enter IP addresses or CIDR ranges (e.g., 203.0.113.45 or 192.168.1.0/24)

🔒 Security for

Machine-specific IP whitelist overrides the global whitelist. Leave empty to use the global whitelist instead.

IP Whitelist for this Machine Enter IP addresses or CIDR ranges

HTTP/HTTPS: Uses HTTP Basic Authentication
TCP ports: Uses challenge-response protocol (send password on connect)

Set Password

Confirm Password

🔀 Routes Management

Create custom subdomains and port forwards for machines and containers

Name	Type	Target	URL	Actions
Loading routes...

➕ Create New Route

Route Name:

Route Type:

Target Type:

Target:

Target Port: Port on the target machine/container

Custom Subdomain:

.gateway.pulsedwh.app

External Port: Port exposed on gateway.pulsedwh.app

Protocol:

Enable SSL (HTTPS)

🔀 Add Route to

Route Type:

Custom Subdomain: Will create: myapp.gateway.pulsedwh.app

External Port (on gateway):

Target Port (internal):

Protocol:

🔒 Enable SSL (HTTPS)

🌐 Join Tailscale network on creation Container will be added to Headscale/Tailscale network automatically

🐳 Docker Containers

0

Total

0

Running

0

Stopped

🚀 Quick Deploy Templates

Loading containers...

No Containers Yet

Click "Create Container" to deploy your first Docker container.

🐳 Create New Container

Template:

Container Name:

Docker Image: Examples: nginx:latest, ubuntu-ssh:latest, node:18

Port Mappings:

→

Leave host port empty for auto-assignment

Protocol:

🔒 Enable SSL (HTTPS) Automatically provision SSL certificate

Environment Variables (optional):

🌐 Join Tailscale network on creation Container will be added to Headscale/Tailscale network automatically

📋 Container Logs

🔌 Manage Ports -

Current Port Mappings

Add New Port Mapping

Container Port

→

Host Port (auto if empty)

⚠️ Note: Adding/removing ports requires container recreation (brief downtime).

Enter Windows Credentials

Enter the username and password for the remote Windows machine:

Username:

Password:

Domain (optional):

Save credentials for this machine

✓ Using saved credentials

🖥️ VNC Connection

Enter the VNC password (if required) and port:

VNC Port:

VNC Password (optional):

×

🌐 Add Port Route

Container Port:

Custom Subdomain (optional): Will create: [port].[container].containers.gateway.pulsedwh.app

🔒 Enable SSL (HTTPS)

×

🐳 Create Custom Container

Container Name: Lowercase letters, numbers, and hyphens only

Dockerfile:

Port Mappings: One per line. Format: container_port or container_port:host_port

Environment Variables (optional): One per line. Format: KEY=value

×

🔑 Change Container Password

Container:

New Password This will change both SSH and VNC passwords inside the container

Confirm Password

×

🔐 Change Password

Current Password

New Password

Confirm New Password

💻 Terminal - ×

$

🌐 Joining Tailscale Network

⏳

Starting...

0%

⏳ Installing Tailscale client

⏳ Generating authentication key

⏳ Starting Tailscale daemon

⏳ Connecting to Headscale

⏳ Retrieving IP address

✅ Success!