https://github.com/basher83/tailnet-microservices
Single-binary Rust services with embedded Tailscale connectivity
https://github.com/basher83/tailnet-microservices
Last synced: 4 months ago
JSON representation
Single-binary Rust services with embedded Tailscale connectivity
- Host: GitHub
- URL: https://github.com/basher83/tailnet-microservices
- Owner: basher83
- Created: 2026-02-06T05:41:03.000Z (5 months ago)
- Default Branch: main
- Last Pushed: 2026-02-08T09:10:46.000Z (4 months ago)
- Last Synced: 2026-02-08T15:28:09.980Z (4 months ago)
- Language: Rust
- Size: 279 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- Agents: AGENTS.md
Awesome Lists containing this project
README
# Tailnet Microservices
> [!CAUTION]
> **Tailnet Microservices is a research project. If your name is not basher83 then do not use.**
>
> This software is experimental, unstable, and under active development. APIs will change without notice. Features may be incomplete or broken. There is no support, no documentation guarantees, and no warranty of any kind. Use at your own risk.
Single-binary Rust services that act as infrastructure proxies on a Tailscale tailnet. Tailnet exposure is handled by the Tailscale Operator via Kubernetes Service annotations. Each service includes Prometheus metrics and structured JSON logging.
## Services
`anthropic-oauth-proxy` injects the `anthropic-beta: oauth-2025-04-20` header into requests proxied to `https://api.anthropic.com`. This enables Claude Max OAuth token authentication through proxies like Aperture that lack custom header injection. Runs as a single-container Kubernetes pod with zero secrets.
## Quick Start
```bash
git clone https://github.com/basher83/tailnet-microservices.git
cd tailnet-microservices
cargo build --workspace
cargo test --workspace
```
## Project Structure
```text
crates/
common/ # Shared types: error types
services/
oauth-proxy/ # Anthropic OAuth header injection proxy
specs/
*.md # Service specifications
k8s/ # Kubernetes deployment manifests
```
## Configuration
Copy `anthropic-oauth-proxy.example.toml` to configure the proxy. See `specs/oauth-proxy.md` for the full configuration reference and `RUNBOOK.md` for operational guidance.
## Deployment
Kubernetes manifests live in `k8s/`. Apply with `kubectl apply -k k8s/`. No secrets required. See `RUNBOOK.md` for the complete deployment procedure.
## License
MIT