DumbMonit
IntégrationsRéseau et pare-feu
Surveiller Tailscale avec DumbMonit
The devices of a tailnet through the Tailscale API: servers offline, node keys about to expire, devices awaiting approval, clients to update, and each device's last connection.
DocumentationSite officiel : Tailscale
Les descriptions des produits sont en anglais, comme dans le produit. Les libellés de la page suivent votre langue.
Ce que DumbMonit surveille
The devices of a tailnet through the Tailscale API: servers that went offline, node keys about to expire, devices waiting for approval, and clients with an update available. DumbMonit reads GET /api/v2/tailnet/{tailnet}/devices on api.tailscale.com, once a minute. The recommended credential is an OAuth client limited to the devices:core:read scope: DumbMonit exchanges its ID and secret for a one-hour token (/api/v2/oauth/token) and keeps it until it expires. It can list the devices and change nothing. An API access token (tskey-api-…) works too, but it carries every right of the user who created it and expires after 90 days at most.
Usage typique. Tailnet: servers offline, node keys expiring, devices awaiting approval
Exemples
- Tailscale tailnet
- Subnet routers
- Exit nodes
Comment il se connecte
Ce qu'il faut
- OAuth clientRecommended: a client limited to the devices:core:read scope, which can change nothing.
- API access tokenWorks too, but carries every right of the user who created it and expires after 90 days at most.
Ports réseau à ouvrir
443/TCPTailscale API (HTTPS, api.tailscale.com)
Étapes de mise en place: Create a read-only OAuth client for DumbMonit
In the Tailscale console (login.tailscale.com), open Settings → Trust credentials → Credential → OAuth.
Tick only the read scope listed below, then click Generate credential.
Copy the client ID and the client secret (tskey-client-...): the secret is shown once.
In DumbMonit, enter api.tailscale.com as address and paste them as Client ID and Client secret; leave the Tailnet option empty.
À savoir. Only tagged devices (servers, subnet routers, exit nodes) are expected to stay online: name the ones to watch in the Devices to keep online option, or enter all.