DumbMonit
用 DumbMonit 监控 Tailscale
The devices of a tailnet through the Tailscale API: servers offline, node keys about to expire, devices awaiting approval, clients to update, and each device's last connection.
产品说明为英文，与产品内一致。页面标签使用您的语言。
DumbMonit 监控的内容
The devices of a tailnet through the Tailscale API: servers that went offline, node keys about to expire, devices waiting for approval, and clients with an update available. DumbMonit reads GET /api/v2/tailnet/{tailnet}/devices on api.tailscale.com, once a minute. The recommended credential is an OAuth client limited to the devices:core:read scope: DumbMonit exchanges its ID and secret for a one-hour token (/api/v2/oauth/token) and keeps it until it expires. It can list the devices and change nothing. An API access token (tskey-api-…) works too, but it carries every right of the user who created it and expires after 90 days at most.
典型用途. Tailnet: servers offline, node keys expiring, devices awaiting approval
示例
- Tailscale tailnet
- Subnet routers
- Exit nodes
连接方式
您需要准备
- OAuth clientRecommended: a client limited to the devices:core:read scope, which can change nothing.
- API access tokenWorks too, but carries every right of the user who created it and expires after 90 days at most.
需要开放的网络端口
443/TCPTailscale API (HTTPS, api.tailscale.com)
设置步骤: Create a read-only OAuth client for DumbMonit
In the Tailscale console (login.tailscale.com), open Settings → Trust credentials → Credential → OAuth.
Tick only the read scope listed below, then click Generate credential.
Copy the client ID and the client secret (tskey-client-...): the secret is shown once.
In DumbMonit, enter api.tailscale.com as address and paste them as Client ID and Client secret; leave the Tailnet option empty.
注意. Only tagged devices (servers, subnet routers, exit nodes) are expected to stay online: name the ones to watch in the Devices to keep online option, or enter all.