Tailscale

services:
  tailscale-$SOMETHING:
    image: tailscale/tailscale:latest
    network_mode: host
    cap_add:
      - NET_ADMIN
    environment:
      - TS_AUTHKEY=$AUTHKEY
      - TS_SERVE_CONFIG=/config/serve.json
      - TS_STATE_DIR=/var/lib/tailscale
      - TS_USERSPACE=true
    depends_on:
      - web
    volumes:
      - ./tailscale:/var/lib/tailscale
      - ./config:/config
    restart: always