chore: publish 0.4.4+v0.29 release

Reviewed-on: #10

abra.sh

@@ -1,3 +1,3 @@
 # Set any config versions here
 # Docs: https://docs.coopcloud.tech/maintainers/handbook/#manage-configs
-export CONFIG_YAML_VERSION=v5
+export CONFIG_YAML_VERSION=v8

compose.yml

@@ -1,7 +1,7 @@
 ---
 services:
   app:
-    image: headscale/headscale:v0.28
+    image: headscale/headscale:v0.29
     networks:
       - proxy
     command: serve
@@ -22,7 +22,7 @@ services:
         - "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`${EXTRA_DOMAINS})"
         - "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure"
         - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
-        - "coop-cloud.${STACK_NAME}.version=0.3.0+v0.28"
+        - "coop-cloud.${STACK_NAME}.version=0.4.4+v0.29"
         # Enable backups: https://docs.coopcloud.tech/maintainers/handbook/#how-do-i-configure-backuprestore
         - "backupbot.backup=${ENABLE_BACKUPS:-true}"
         - "backupbot.backup.path=/var/lib/headscale"

config.yaml.tmpl

@@ -135,7 +135,13 @@ derp:
 disable_check_updates: false
 
 # Time before an inactive ephemeral node is deleted?
-ephemeral_node_inactivity_timeout: 30m
+node:
+  # The amount of time a node is authenticated with OpenID until it expires
+  # and needs to reauthenticate.
+  # Setting the value to "0" will mean no expiry.
+  expiry: {{ env "EXPIRY" }}
+  ephemeral:
+    inactivity_timeout: 30m
 
 database:
   # Database type. Available options: sqlite, postgres
@@ -345,11 +351,6 @@ oidc:
   # `LoadCredential` straightforward:
   client_secret_path: "/run/secrets/oidc_client_key"
 
-  # The amount of time a node is authenticated with OpenID until it expires
-  # and needs to reauthenticate.
-  # Setting the value to "0" will mean no expiry.
-  expiry: {{ env "EXPIRY" }}
-
   # Use the expiry from the token received from OpenID when the user logged
   # in. This will typically lead to frequent need to reauthenticate and should
   # only be enabled if you know what you are doing.
@@ -410,11 +411,6 @@ logtail:
   # disabled by default. Enabling this will make your clients send logs to Tailscale Inc.
   enabled: false
 
-# Enabling this option makes devices prefer a random port for WireGuard traffic over the
-# default static port 41641. This option is intended as a workaround for some buggy
-# firewall devices. See https://tailscale.com/kb/1181/firewalls/ for more information.
-randomize_client_port: false
-
 # Taildrop configuration
 # Taildrop is the file sharing feature of Tailscale, allowing nodes to send files to each other.
 # https://tailscale.com/kb/1106/taildrop/

release/0.3.1+v0.28

@@ -0,0 +1 @@
+added EXPIRY env (non-breaking)