core/installer/values-tmpl/headscale.yaml

apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: namespaces-headscale
  namespace: {{ .Global.Id }}
spec:
  chart:
    spec:
      chart: charts/namespaces
      sourceRef:
        kind: GitRepository
        name: pcloud
        namespace: {{ .Global.Id }}
  interval: 1m0s
  values:
    pcloudInstanceId: {{ .Global.Id }}
    namespacePrefix: {{ .Global.NamespacePrefix }}
    namespaces:
    - app-headscale
---
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: headscale
  namespace: {{ .Global.Id }}
spec:
  targetNamespace: {{ .Global.NamespacePrefix }}app-headscale
  dependsOn:
    - name: namespaces-headscale
      namespace: {{ .Global.Id }}
    - name: core-auth
      namespace: {{ .Global.Id }}
  chart:
    spec:
      chart: charts/headscale
      sourceRef:
        kind: GitRepository
        name: pcloud
        namespace: {{ .Global.Id }}
  interval: 1m0s
  values:
    image:
      repository: headscale/headscale
      tag: 0.22.3
      pullPolicy: IfNotPresent
    storage:
      size: 5Gi
    ingressClassName: pcloud-ingress-public
    certificateIssuer: {{ .Global.Id }}-public
    domain: {{ .Values.Subdomain }}.{{ .Global.Domain }}
    publicBaseDomain: {{ .Global.Domain }}
    oauth2:
      hydraAdmin: http://hydra-admin.{{ .Global.NamespacePrefix }}core-auth.svc.cluster.local
      hydraPublic: https://hydra.{{ .Global.Domain }}
      clientId: headscale
      secretName: oauth2-client-headscale
    ipAddressPool: {{ .Global.Id }}-headscale
    api:
      port: 8585
      image:
        repository: giolekva/headscale-api
        tag: latest
        pullPolicy: Always