headscale-node-lifecycle

Manage Headscale tailnet node lifecycle via CLI or REST API.

40|6|Updated Jul 11, 2026
One-click install
npx skills add https://github.com/magnus919/agent-skills --skill headscale-node-lifecycle
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: headscale-node-lifecycle
Source: https://github.com/magnus919/agent-skills/tree/main/bundles/tailscale/skills/headscale-node-lifecycle
Command: npx skills add https://github.com/magnus919/agent-skills --skill headscale-node-lifecycle

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires jq, curl, headscale, and includes scripts (resource) components.

What problem does it solve?

This skill eliminates the manual overhead of managing device registration, authentication, and inventory within a Headscale tailnet, ensuring consistent infrastructure state.

Core Features & Use Cases

  • Automated Registration: Generate pre-authenticated keys for personal or tagged nodes to streamline device onboarding.
  • Lifecycle Management: Approve pending nodes, update tags, and decommission devices via CLI or REST API.
  • Use Case: Use this skill to automatically provision ephemeral CI runners by generating a reusable auth key with specific tags and then cleaning up the node registration once the job completes.

Quick Start

Use the headscale-node-lifecycle skill to generate a pre-authenticated key for a new node tagged as webserver with a one hour expiration.

Frequently Asked Questions about headscale-node-lifecycle

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Headscale node registration and lifecycle management?

Automate Headscale node lifecycle management by using scripts to generate pre-authenticated keys, approve pending nodes, apply tags, and decommission devices via CLI or REST API.

Can I generate pre-authenticated keys for tagged nodes in a Headscale tailnet?

Yes, you can generate pre-authenticated keys for tagged nodes in a Headscale tailnet, specifying parameters like tags and expiration times to streamline automated device onboarding.

Do I need the headscale binary installed to manage tailnet nodes via API?

No, you do not need the headscale binary installed if you use curl with valid API credentials, allowing you to execute administrative operations and node lifecycle management remotely.

What's the best way to provision and clean up ephemeral CI runners on a Headscale tailnet?

Provision ephemeral CI runners by generating a reusable auth key with specific tags, then automate node decommissioning to clean up the device registration once the CI job completes.

How does Headscale node decommissioning work through the REST API?

Headscale node decommissioning through the REST API removes devices from the tailnet inventory using curl requests with valid credentials, ensuring consistent infrastructure state for expired or retired nodes.

Can I update tags on existing Headscale nodes without manual CLI commands?

Yes, you can update tags on existing Headscale nodes without manual CLI commands by automating the process through REST API requests or scripts to maintain infrastructure inventory.