From a0ff2179155ddc23f9c50ec5240116805884efdb Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?c=C4=83t=C4=83lin?= <catalin@roboces.dev>
Date: Wed, 28 Jan 2026 19:23:35 +0100
Subject: [PATCH] feat: add tailscale exit node

---
 docker/tailscale/docker-compose.yml | 18 ++++++++++++++++++
 docker/tailscale/sample.env         |  5 +++++
 2 files changed, 23 insertions(+)
 create mode 100644 docker/tailscale/docker-compose.yml
 create mode 100644 docker/tailscale/sample.env

diff --git a/docker/tailscale/docker-compose.yml b/docker/tailscale/docker-compose.yml
new file mode 100644
index 0000000..71384f1
--- /dev/null
+++ b/docker/tailscale/docker-compose.yml
@@ -0,0 +1,18 @@
+---
+services:
+  tailscale:
+    image: tailscale/tailscale:v1.92.4
+    hostname: tailscale
+    environment:
+      TS_AUTHKEY: ${TS_AUTHKEY}
+      TS_HOSTNAME: ${TS_HOSTNAME:-docker-exit-node}
+      TS_EXTRA_ARGS: ${TS_EXTRA_ARGS:---advertise-exit-node}
+      TS_ROUTES: ${TS_ROUTES:-192.168.1.0/24}
+      TS_STATE_DIR: /var/lib/tailscale
+    volumes:
+      - ${TS_VOLUME:-/mnt/nas1/shared/tailscale}:/var/lib/tailscale
+    devices:
+      - /dev/net/tun:/dev/net/tun
+    cap_add:
+      - net_admin
+    restart: unless-stopped
diff --git a/docker/tailscale/sample.env b/docker/tailscale/sample.env
new file mode 100644
index 0000000..83646d5
--- /dev/null
+++ b/docker/tailscale/sample.env
@@ -0,0 +1,5 @@
+TS_AUTHKEY=
+TS_HOSTNAME=docker-exit-node
+TS_EXTRA_ARGS=--advertise-exit-node
+TS_ROUTES=192.168.1.0/24
+TS_VOLUME=/mnt/nas1/shared/tailscale