tailscale docker部署

#tailscale #derper #docker

derper部署

version: '3'
services:
  derper:
    container_name: derper
    image: fredliang/derper
    restart: always
    ports:
      - "3477:3477"
      - "3478:3478/udp"
    environment:
      - DERP_DOMAIN=xxx.xxx.xxx
      - DERP_CERT_MODE=letsencrypt
      - DERP_ADDR=:3477
      - DERP_VERIFY_CLIENTS=true
    volumes:
      - /var/run/tailscale/tailscaled.sock:/var/run/tailscale/tailscaled.sock

DERP_DOMAIN填写域名不带协议（例如 derp.xxx.com）

tailscale部署

version: '3.8'
services:
  tailscaled:
    image: tailscale/tailscale
    container_name: tailscaled
    restart: always
    network_mode: host
    environment:
      - TS_STATE_DIR=/var/lib/tailscale
      - TS_USERSPACE=0
    volumes:
      - /var/lib:/var/lib
      - /dev/net/tun:/dev/net/tun
      - /var/run/tailscale:/tmp
    cap_add:
      - NET_ADMIN
      - NET_RAW