[naimhasim]

What is this PR about?

New PR of DockTail — adds the blueprints/docktail/ template.

Host prerequisites (required before this template works)

Because this is the host setup, the host must already run Tailscale:

1. Tailscale installed and connected on the Linux host, advertising a tag that matches the ACL auto-approver:

   sudo tailscale up --advertise-tags=tag:server --reset
   (--reset briefly drops the Tailscale connection)

2. ACLs with the tag and service auto-approver:

{
  "tagOwners": {
    "tag:server": ["autogroup:admin"],
    "tag:container": ["tag:server"]
  },
  "autoApprovers": {
    "services": { "tag:container": ["tag:server"] }
  }
}

3. A Tailscale OAuth client (Settings → Trust credentials) scoped to tag:server with General → Services: Write and Devices → Core: Write. Paste ID/secret into the template variables at deploy time. OAuth is optional, but without it service definitions must be created manually in the admin console.

If the host does not run Tailscale, this template will not work. Those users should use DockTail's Tailscale Sidecar (https://docktail.org/docs/#tailscale-sidecar) setup instead (not covered by this template).

Exposes an app:
Add labels to the container that should be exposed:

labels:
  - "docktail.service.enable=true"
  - "docktail.service.name=myapp"
  - "docktail.service.port=3000"

Then reach it at https://myapp.[tailnet].ts.net.

Checklist

Before submitting this PR, please make sure that:

• I have read the suggestions in the README.md file https://github.com/Dokploy/templates?tab=readme-ov-file#general-requirements-when-creating-a-template
• I have tested the template in my instance, so the maintainers don't spend time trying to figure out what's wrong.
• I have added tests that demonstrate that my correction works or that my new feature works.

Issues related (if applicable)

Close automatically the related issues using the keywords: closes #ISSUE_NUMBER

Screenshots or Videos

[github-actions]

built with Refined Cloudflare Pages Action

⚡ Cloudflare Pages Deployment

Name	Status	Preview	Last Commit
templates	✅ Ready (View Log)	Visit Preview	03cede0

[Siumauricio]

Pushed a fix: a standard Dokploy server has no host tailscaled, so the /var/run/tailscale bind mount was empty and DockTail couldn't work. I switched to your documented sidecar setup: a pinned tailscale/tailscale:v1.102.5 runs in userspace mode, keeps its state and socket in named volumes, and shares the socket with DockTail. Users now set TAILSCALE_AUTH_KEY (tagged tag:server), the OAuth client ID/secret and the ACL autoApprovers, and nothing needs to be installed on the host. Re-tested on Dokploy: DockTail is healthy and reconciles through the sidecar, which waits for the auth key.

Approved, thanks!