services:
  tailscale:
    image: tailscale/tailscale:stable@sha256:25cde9ad76020b0e29229136d0c38b5962e9a0e1774ffac9b0df68e4a37d6cf0
    container_name: Tailscale-Docker
    restart: unless-stopped
    network_mode: host

    cap_add:
      - NET_ADMIN
      - NET_RAW

    security_opt:
      - no-new-privileges:true

    devices:
      - /dev/net/tun:/dev/net/tun

    environment:
      - TZ=Europe/Berlin
      - TS_HOSTNAME=kallilab-core
      - TS_STATE_DIR=/state
      - TS_AUTH_ONCE=true

    volumes:
      - /mnt/user/appdata/tailscale:/state