services:
  tailscale:
    image: tailscale/tailscale:stable
    container_name: Tailscale-Docker
    restart: unless-stopped
    network_mode: host

    cap_add:
      - NET_ADMIN
      - NET_RAW

    security_opt:
      - no-new-privileges:true

    devices:
      - /dev/net/tun:/dev/net/tun

    environment:
      - TZ=Europe/Berlin
      - TS_HOSTNAME=kallilab-core
      - TS_STATE_DIR=/state
      - TS_AUTH_ONCE=true

    volumes:
      - /mnt/user/appdata/tailscale:/state