example.json

[
  {
    // Hostname of the tsnet server; will be accessible at http://example and
    // https://example.<tailnet-dns>.ts.net
    "Name": "example",

    // HTTP backend to proxy to; can also be a path to a UNIX socket,
    // e.g. unix:///run/myapp.sock
    "backend": "http://127.0.0.1:8000",

    // Expression that evaluates to a map of headers to add to requests.
    // Keys are prefixed with X-WEBAUTH-<KEY>.
    // This is optional, by default no additional header is set.
    // See https://expr-lang.org/ and the exprEnv struct for details.
    "header": "{user: tailscale?.LoginName ?? oidc.Sub}",

    // Optional funnel configuration. See https://tailscale.com/kb/1223/funnel
    "funnel": {
      // Setting the issuer enables OIDC auth.
      // The redirect URL must be set to https://<fqdn>/.oidc-callback
      "issuer": "http://localhost:8085",
      "clientID": "client-id",
      "clientSecret": "client-secret",

      // This enables HTTP Basic Auth:
      "user": "admin",
      "password": "secret",
    },

    // Optional TCP port to expose, in addition to port 80 and 443.
    "tcp": {
      "port": 29418,
      "target": "tcp://127.0.0.1:29418", // unix:// is supported
    },

  },
]