Tailscale

docker-compose.yml

services:
  tailscale-$SOMETHING:
    image: tailscale/tailscale:latest
    network_mode: host
    cap_add:
      - NET_ADMIN
    environment:
      - TS_AUTHKEY=$AUTHKEY
      - TS_SERVE_CONFIG=/config/serve.json
      - TS_STATE_DIR=/var/lib/tailscale
      - TS_USERSPACE=true
    depends_on:
      - $SERVICE
    volumes:
      - ./tailscale:/var/lib/tailscale
      - ./config:/config
    restart: always

./config/serve.json

{
  "TCP": {
    "443": {
      "HTTPS": true
    }
  },
  "Web": {
    "${TS_CERT_DOMAIN}:443": {
      "Handlers": {
        "/": {
          "Proxy": "http://127.0.0.1:4533"
        }
      }
    }
  }
}