Merge pull request #1187 from naimhasim/docktail

feat: add DockTail template

Author: Siumauricio

blueprints/docktail/docker-compose.yml

@@ -0,0 +1,40 @@
+version: "3.8"
+services:
+  docktail:
+    image: ghcr.io/marvinvr/docktail:1.6.0
+    restart: unless-stopped
+    depends_on:
+      - tailscale
+    dns:
+      - 1.1.1.1
+      - 8.8.8.8
+    environment:
+      - TAILSCALE_OAUTH_CLIENT_ID=${TAILSCALE_OAUTH_CLIENT_ID}
+      - TAILSCALE_OAUTH_CLIENT_SECRET=${TAILSCALE_OAUTH_CLIENT_SECRET}
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+      - tailscale-socket:/var/run/tailscale
+
+  # Tailscale sidecar (upstream "Tailscale Sidecar" setup): runs its own
+  # tailscaled so the host does not need Tailscale installed. Userspace
+  # networking avoids /dev/net/tun and extra capabilities; host networking
+  # lets it reach container IPs on any Docker network.
+  tailscale:
+    image: tailscale/tailscale:v1.102.5
+    restart: unless-stopped
+    network_mode: host
+    environment:
+      - TS_AUTHKEY=${TAILSCALE_AUTH_KEY}
+      - TS_HOSTNAME=${TAILSCALE_HOSTNAME}
+      - TS_EXTRA_ARGS=--advertise-tags=${TAILSCALE_TAGS}
+      - TS_USERSPACE=true
+      - TS_AUTH_ONCE=true
+      - TS_STATE_DIR=/var/lib/tailscale
+      - TS_SOCKET=/var/run/tailscale/tailscaled.sock
+    volumes:
+      - tailscale-state:/var/lib/tailscale
+      - tailscale-socket:/var/run/tailscale
+
+volumes:
+  tailscale-state:
+  tailscale-socket:

blueprints/docktail/docktail.png

@@ -0,0 +1,18 @@
+{
+  "id": "docktail",
+  "name": "DockTail",
+  "version": "1.6.0",
+  "description": "DockTail exposes Docker containers as native Tailscale Services using labels, with no published ports and no per-container Tailscale devices.",
+  "logo": "docktail.png",
+  "links": {
+    "github": "https://github.com/marvinvr/docktail",
+    "website": "https://docktail.org/",
+    "docs": "https://docktail.org/docs/"
+  },
+  "tags": [
+    "networking",
+    "tailscale",
+    "vpn",
+    "docker"
+  ]
+}

blueprints/docktail/meta.json

@@ -0,0 +1,15 @@
+[variables]
+
+[config]
+mounts = []
+
+[config.env]
+# Auth key for the bundled tailscaled sidecar (Admin Console -> Settings -> Keys).
+# Use a tagged, reusable or one-off key; the node must carry a tag that your
+# ACL autoApprovers allow to advertise services.
+TAILSCALE_AUTH_KEY = ""
+TAILSCALE_HOSTNAME = "docktail"
+TAILSCALE_TAGS = "tag:server"
+# OAuth client used by DockTail to create Tailscale Services.
+TAILSCALE_OAUTH_CLIENT_ID = ""
+TAILSCALE_OAUTH_CLIENT_SECRET = ""