summaryrefslogtreecommitdiff
path: root/playbooks/roles/outbound/templates/proxy/docker-compose.yml
blob: 9642d6ae02ab212de78a8e9e2ebf7951e4651e9d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
services:
  headscale-client:
    image: tailscale/tailscale:latest
    environment:
      - TS_AUTHKEY={{ headscale_user_auth_key }}
      - TS_EXTRA_ARGS=--login-server=https://{{ headscale_host }} --accept-routes --accept-dns --stateful-filtering=false
      - TS_STATE_DIR=/var/lib/tailscale
      - TS_USERSPACE=false
      - TZ={{ timezone }}

      - VIRTUAL_HOST=*.{{ domain }},{{ domain }}
      - VIRTUAL_PORT=80
      - LETSENCRYPT_HOST=*.{{ domain }},{{ domain }}
    hostname: headscale-outbound
    restart: unless-stopped
    cap_add:
      - NET_ADMIN
      - SYS_ADMIN
    volumes:
      - ./data:/var/lib/tailscale
      - /dev/net/tun:/dev/net/tun
    networks:
      - proxy
  proxy:
    image: nginx:latest
    network_mode: service:headscale-client
    depends_on:
      - headscale-client
    volumes:
      - ./sites-enabled:/etc/nginx/conf.d
      - ./toplevel.conf.d:/etc/nginx/toplevel.conf.d

networks:
  proxy:
    external: true