diff options
author | Elizabeth Hunt <me@liz.coffee> | 2025-03-23 21:35:03 -0700 |
---|---|---|
committer | Elizabeth Hunt <me@liz.coffee> | 2025-03-23 21:35:03 -0700 |
commit | aeab0e7c54e3995312490e7c4476f162b880f625 (patch) | |
tree | 5cc2e8cf3f5a121493ccf4a62787774f9f78fa12 /playbooks/roles/outbound/templates/proxy/docker-compose.yml | |
parent | e5eba51991a0640c6e5d1da0bd78cdbc9d4513f2 (diff) | |
download | infra-aeab0e7c54e3995312490e7c4476f162b880f625.tar.gz infra-aeab0e7c54e3995312490e7c4476f162b880f625.zip |
fix outbound stuff
Diffstat (limited to 'playbooks/roles/outbound/templates/proxy/docker-compose.yml')
-rw-r--r-- | playbooks/roles/outbound/templates/proxy/docker-compose.yml | 36 |
1 files changed, 36 insertions, 0 deletions
diff --git a/playbooks/roles/outbound/templates/proxy/docker-compose.yml b/playbooks/roles/outbound/templates/proxy/docker-compose.yml new file mode 100644 index 0000000..3074047 --- /dev/null +++ b/playbooks/roles/outbound/templates/proxy/docker-compose.yml @@ -0,0 +1,36 @@ +services: + headscale-client: + image: tailscale/tailscale:latest + environment: + - TS_AUTHKEY={{ headscale_user_auth_key }} + - TS_EXTRA_ARGS=--login-server=https://{{ headscale_host }} --accept-routes --accept-dns --stateful-filtering=false + - TS_STATE_DIR=/var/lib/tailscale + - TS_USERSPACE=false + - TZ={{ timezone }} + hostname: headscale-outbound + restart: unless-stopped + cap_add: + - NET_ADMIN + - SYS_ADMIN + volumes: + - ./data:/var/lib/tailscale + - /dev/net/tun:/dev/net/tun + networks: + - headnet + proxy: + image: nginx:latest + depends_on: + - headscale-client + networks: + - proxy + - headnet + environment: + - VIRTUAL_HOST=*.{{ domain }},{{ domain }} + - VIRTUAL_PORT=80 + - LETSENCRYPT_HOST=*.{{ domain }},{{ domain }} + +networks: + headnet: + proxy: + external: true + |