diff --git a/security/headscale/Makefile b/security/headscale/Makefile
index 86e7bbe9c0cc..0ec6e46df7b9 100644
--- a/security/headscale/Makefile
+++ b/security/headscale/Makefile
@@ -1,44 +1,47 @@
 PORTNAME=	headscale
-PORTVERSION=	0.27.0
 DISTVERSIONPREFIX=	v
+DISTVERSION=	0.27.1
 CATEGORIES=	security net-vpn
 
 MAINTAINER=	m.muenz@gmail.com
 COMMENT=	Mesh VPN that makes it easy to connect your devices
 WWW=		https://github.com/juanfont/headscale
 
 LICENSE=	BSD3CLAUSE
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 BROKEN_armv6=	fails to compile: modernc.org/libc
 BROKEN_armv7=	fails to compile: modernc.org/libc
 
+NOT_FOR_ARCHS=	i386
+NOT_FOR_ARCHS_REASON=	version 0.27 removed i386 support
+
 RUN_DEPENDS=	ca_root_nss>0:security/ca_root_nss
 
-USES=		go:modules
-USE_RC_SUBR=	headscale
+USES=		go:1.25,modules
+USE_RC_SUBR=	${PORTNAME}
 
 GO_MODULE=	github.com/juanfont/headscale
 
 GO_TARGET=	./cmd/headscale
 
 PLIST_FILES=	"@sample ${ETCDIR}/config.yaml.sample" \
 		"@dir /var/cache/${PORTNAME}" \
 		"@dir /var/db/${PORTNAME}" \
 		bin/${PORTNAME}
 
 post-patch:
-	@${REINPLACE_CMD} -e 's|/etc/headscale|${PREFIX}/etc/${PORTNAME}|g' \
+	@${REINPLACE_CMD} -e 's|/etc/headscale|${ETCDIR}|g' \
 		${WRKSRC}/cmd/headscale/cli/dump_config.go \
 		${WRKSRC}/cmd/headscale/cli/root.go \
 		${WRKSRC}/integration/hsic/hsic.go
 	@${REINPLACE_CMD} -e 's|/var/lib/headscale/db.sqlite|/var/db/${PORTNAME}/db.sqlite|g' \
 		${WRKSRC}/config-example.yaml
 
 post-install:
-	${MKDIR} ${STAGEDIR}${PREFIX}/etc/${PORTNAME}
-	${INSTALL_DATA} ${WRKSRC}/config-example.yaml ${STAGEDIR}${PREFIX}/etc/${PORTNAME}/config.yaml.sample
-	${MKDIR} ${STAGEDIR}/var/db/${PORTNAME}
-	${MKDIR} ${STAGEDIR}/var/cache/${PORTNAME}
+	${MKDIR} ${STAGEDIR}${ETCDIR} \
+		 ${STAGEDIR}/var/cache/${PORTNAME} \
+		 ${STAGEDIR}/var/db/${PORTNAME}
+	${INSTALL_DATA} ${WRKSRC}/config-example.yaml ${STAGEDIR}${ETCDIR}/config.yaml.sample
 
 .include <bsd.port.mk>
diff --git a/security/headscale/distinfo b/security/headscale/distinfo
index 4fb0183420ec..0cc6274e8a6a 100644
--- a/security/headscale/distinfo
+++ b/security/headscale/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1762185851
-SHA256 (go/security_headscale/headscale-v0.27.0/v0.27.0.mod) = 7d878d4ca6412cda6440eb4a55afbb3622e2bb810974038f7688f50bd633615c
-SIZE (go/security_headscale/headscale-v0.27.0/v0.27.0.mod) = 11584
-SHA256 (go/security_headscale/headscale-v0.27.0/v0.27.0.zip) = 012c8a3414a06005663375df1496ad54863c6460bac121ea8073d72256fa90b7
-SIZE (go/security_headscale/headscale-v0.27.0/v0.27.0.zip) = 1334409
+TIMESTAMP = 1763102828
+SHA256 (go/security_headscale/headscale-v0.27.1/v0.27.1.mod) = fb438d8abf827578c872a0709286318eaed448d7cfbee0778ff0462d304a44c9
+SIZE (go/security_headscale/headscale-v0.27.1/v0.27.1.mod) = 11585
+SHA256 (go/security_headscale/headscale-v0.27.1/v0.27.1.zip) = 0d1a1089f6d5e7cbc644ecd5530cf5d26f75f6de1b1e2791044d49b6fbf9464b
+SIZE (go/security_headscale/headscale-v0.27.1/v0.27.1.zip) = 1350409