services:
  tailscale:
    image: tailscale/tailscale:stable@sha256:dbeff02d2337344b351afac203427218c4d0a06c43fc10a865184063498472a6
    container_name: Tailscale-Docker
    restart: unless-stopped
    network_mode: host

    cap_add:
      - NET_ADMIN
      - NET_RAW

    security_opt:
      - no-new-privileges:true

    devices:
      - /dev/net/tun:/dev/net/tun

    environment:
      - TZ=Europe/Berlin
      - TS_HOSTNAME=kallilab-core
      - TS_STATE_DIR=/state
      - TS_AUTH_ONCE=true

    volumes:
      - /mnt/user/appdata/tailscale:/state