---
services:
  tailscale:
    image: tailscale/tailscale:v1.96.5
    hostname: tailscale
    environment:
      TS_AUTHKEY: ${TS_AUTHKEY}
      TS_HOSTNAME: ${TS_HOSTNAME:-docker-exit-node}
      TS_EXTRA_ARGS: ${TS_EXTRA_ARGS:---advertise-exit-node}
      TS_ROUTES: ${TS_ROUTES:-192.168.1.0/24}
      TS_STATE_DIR: /var/lib/tailscale
    volumes:
      - ${TS_VOLUME:-/mnt/nas1/shared/tailscale}:/var/lib/tailscale
    devices:
      - /dev/net/tun:/dev/net/tun
    cap_add:
      - net_admin
    restart: unless-stopped