From 2f767c2f34391fd21105ca0356f561cf9cf0211f Mon Sep 17 00:00:00 2001 From: Matthew Holt Date: Thu, 10 Mar 2022 11:59:20 -0700 Subject: [PATCH] Clarify that enabling tailscale is not necessary --- src/docs/markdown/caddyfile/directives/tls.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/docs/markdown/caddyfile/directives/tls.md b/src/docs/markdown/caddyfile/directives/tls.md index 87e92d0..599bc70 100644 --- a/src/docs/markdown/caddyfile/directives/tls.md +++ b/src/docs/markdown/caddyfile/directives/tls.md @@ -198,6 +198,8 @@ These manager modules come standard with the `tls` directive: Get certificates from a locally-running [Tailscale](https://tailscale.com) instance. [HTTPS must be enabled in your Tailscale account](https://tailscale.com/kb/1153/enabling-https/) (or your open source [Headscale server](https://github.com/juanfont/headscale)); and the Caddy process must either be running as root, or you must configure `tailscaled` to give your Caddy user [permission to fetch certificates](https://github.com/caddyserver/caddy/pull/4541#issuecomment-1021568348). +**NOTE: This is usually unnecessary! Caddy automatically uses Tailscale for all *.ts.net domains without any configuration.** + ```caddy-d get_certificate tailscale ```