#Headscale needs a public IP/DNS, and runs best without NAT like docker or home routers