server_url: https://headscale.rozic-dev.com
listen_addr: 0.0.0.0:8080

# REQUIRED by newer Headscale (TS2021/Noise)
noise:
  private_key_path: /var/lib/headscale/noise_private.key

# Tailnet address pools
prefixes:
  v4: 100.64.0.0/10
  v6: fd7a:115c:a1e0::/48

# Use Tailscale public DERP (built-in disabled so you don't need extra ports)
derp:
  server:
    enabled: false
  urls:
    - https://controlplane.tailscale.com/derpmap/default

# NEW DNS schema (dns_config is deprecated). Since override_local_dns is true,
# nameservers.global MUST be set.
dns:
  override_local_dns: true
  nameservers:
    global:
      - 1.1.1.1
      - 8.8.8.8

log:
  level: info
  format: text