services:
  tailscale:
    image: tailscale/tailscale:latest
    container_name: tailscaled
    restart: unless-stopped
    network_mode: host
    
    cap_add:
      - NET_ADMIN
      - NET_RAW

    devices:
      - /dev/net/tun:/dev/net/tun

    volumes:
      - /share/containers_data/config/tailscale:/var/lib/tailscale

    environment:
      - TS_STATE_DIR=/var/lib/tailscale
      - TS_AUTHKEY=tskey-auth-something  ## use your auth key here