services:

  tailscale:

    image: tailscale/tailscale:latest

    container_name: tailscale

    network_mode: "host"  
    privileged: true      
    environment:

      TS_AUTHKEY: tskey-auth-keSCdpHJf611CNTRL-wj88c3GmLaT5gEtXNSQMbTgehRqtHw5f   # 修改自己的

      TS_EXTRA_ARGS: --netfilter-mode=off #--login-server=http://headscaleserver.com

      TS_STATE_DIR: /var/lib/tailscale # 存储 tailscale 状态的目录, 后面映射到宿主机, 确保在容器重新启动时配置保持不变

      #TS_ROUTES: 192.168.10.0/24

      TS_HOSTNAME: ugospro              # 节点名字, 可自定义

    volumes:

      - ./tailscale/state:/var/lib/tailscale # 映射 tailscale 状态目录到我们创建的tailscale/state内

      - /dev/net/tun:/dev/net/tun

      - /usr/share/zoneinfo/Asia/Shanghai:/etc/localtime:ro

    cap_add:

      - net_admin

      - sys_module

    restart: unless-stopped