1name: tiny23services:4 tailscale:5 # Local 1.102.3 build with the typed PortlistServices subscription fix.6 image: tiny-tailscale:dogfood7 container_name: tiny-tailscale8 hostname: tiny9 environment:10 TS_HOSTNAME: tiny11 TS_STATE_DIR: /var/lib/tailscale12 TS_AUTH_ONCE: "true"13 TS_USERSPACE: "false"14 TS_ACCEPT_DNS: "false"15 TS_EXTRA_ARGS: --shields-up=false16 TS_ENABLE_HEALTH_CHECK: "true"17 TS_ENABLE_METRICS: "true"18 TS_LOCAL_ADDR_PORT: 127.0.0.1:900219 volumes:20 - type: bind21 source: /srv/tiny/tailscale22 target: /var/lib/tailscale23 bind:24 create_host_path: false25 devices:26 - /dev/net/tun:/dev/net/tun27 cap_add: [NET_ADMIN]28 healthcheck:29 test: [CMD, wget, -q, -O, /dev/null, http://127.0.0.1:9002/healthz]30 interval: 30s31 timeout: 5s32 retries: 333 restart: unless-stopped3435 relay:36 image: tiny:dogfood37 container_name: tiny38 network_mode: service:tailscale39 pid: service:tailscale40 depends_on: [tailscale]41 command:42 - serve43 - --listen=127.0.0.1:744744 - --public-url=https://tiny.tailbe516a.ts.net45 - --default-tenant=tiny46 - --provision-owner=c01503e8035f5a98eb2004721dc4eeddda498c7871927ae7edb4525ab6ccf2d747 - --allow-private-relays48 - --diagnostics=127.0.0.1:909149 env_file: /srv/tiny/deploy/tiny.env50 volumes:51 - type: bind52 source: /srv/tiny/data53 target: /data54 bind:55 create_host_path: false56 restart: unless-stopped57 stop_grace_period: 30s5859 https:60 image: caddy@sha256:5f5c8640aae01df9654968d946d8f1a56c497f1dd5c5cda4cf95ab7c14d5864861 container_name: tiny-https62 network_mode: service:tailscale63 pid: service:tailscale64 depends_on: [tailscale, relay]65 volumes:66 - type: bind67 source: /srv/tiny/deploy/Caddyfile68 target: /etc/caddy/Caddyfile69 read_only: true70 bind:71 create_host_path: false72 - type: bind73 source: /srv/tiny/certs74 target: /certs75 read_only: true76 bind:77 create_host_path: false78 - type: bind79 source: /srv/tiny/logs80 target: /logs81 bind:82 create_host_path: false83 tmpfs: [/data, /config]84 healthcheck:85 test: [CMD, wget, -q, -O, /dev/null, http://127.0.0.1:7447/readyz]86 interval: 30s87 timeout: 5s88 retries: 389 restart: unless-stopped