services:
  tailscale:
    image: tailscale/tailscale:latest
    container_name: tailscale
    hostname: virmach-ubuntu
    restart: unless-stopped
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    network_mode: host
    # privileged: true
    environment:
      - TS_AUTHKEY=${TS_AUTHKEY}
    volumes:
      - /dev/net/tun:/dev/net/tun
      - /opt/tailscale:/var/lib/tailscale
    labels:
      - "com.centurylinklabs.watchtower.enable=true"
    # command: >
    #  tailscaled
    command: >
      sh -c "env && tailscaled"