services:
  tailscale-fumble:
    image: tailscale/tailscale:latest
    hostname: fumblearound # Assign a name this so that you can set your domain name ex. https://tail.penguin-dory.ts.net
    ports: # Uncomment the next two lines to expose the container to your local area network.
      - 80:80
    environment:
      - TS_AUTHKEY= # BE SURE TO ADD YOUR KEY AS NOTHING WILL WORK
      #- TS_EXTRA_ARGS=--advertise-tags=tag:container  # Uncomment this if you want to add a tag to your node. Useful for access control lists.
      #- TS_FUNNEL_CONFIG=/config/funnel.json # Uncomment this and comment the next line if you want to host your app publicly.
      #- TS_SERVE_CONFIG=/config/serve.json # Comment this line if you uncomment the one above.
      - TS_STATE_DIR=/var/lib/tailscale
      - TS_USERSPACE=true
      - TS_ACCEPT_DNS=false
    volumes:
      - ${PWD}/tailserve-config:/config
      - ${PWD}/tailscale/state:/var/lib/tailscale
      - /dev/net/tun:/dev/net/tun
    cap_add:
      - net_admin
      - sys_module
    restart: unless-stopped

  fumblearound:
    image: nginx:alpine
    volumes:
      - .:/usr/share/nginx/html
      - ./nginx.conf:/etc/nginx/conf.d/default.conf
    restart: unless-stopped
    network_mode: service:tailscale-fumble
    depends_on:
      - tailscale-fumble