Generate Headscale client secret.
docker exec -it authelia authelia crypto hash generate pbkdf2 --variant sha512 --random --random.length 72 --random.charset rfc3986
The digest goes in the CLIENT_SECRET_HEADSCALE file and the random password is used in the headscale container config.yml file