docker-dev/docker-compose.tailscale.yml at main · sam-mfb/docker-dev · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
services:
  tailscale:
    image: tailscale/tailscale:latest
    container_name: ${CONTAINER_NAME:-sam-dev-container-active}-ts
    hostname: ${HOSTNAME:-sam-dev}
    environment:
      - TS_AUTHKEY=${TS_AUTHKEY}
      - TS_HOSTNAME=${HOSTNAME:-sam-dev}
      - TS_USERSPACE=false
      - TS_STATE_DIR=/var/lib/tailscale
      - TS_EXTRA_ARGS=--shields-up --accept-dns=true
    volumes:
      - tailscale-state:/var/lib/tailscale
      - /dev/net/tun:/dev/net/tun
    cap_add:
      - NET_ADMIN
      - NET_RAW
    ports:
      - "${HOST_PORTS:-3002}:${CONTAINER_PORTS:-3000}"
      - "${HOST_PORT_RANGE:-3010-3019}:${CONTAINER_PORT_RANGE:-3010-3019}"
      - "${NOVNC_HOST_PORT:-6080}:6080"
    restart: unless-stopped

  dev:
    image: ${IMAGE_TAG:-sam-dev-container}
    container_name: ${CONTAINER_NAME:-sam-dev-container-active}
    network_mode: "service:tailscale"
    depends_on:
      - tailscale
    shm_size: 2gb
    environment:
      - MCP_GATEWAY_AUTH_TOKEN=${MCP_GATEWAY_AUTH_TOKEN}
      - ADO_ORG=${ADO_ORG}
      - ENABLE_CLAUDEAI_MCP_SERVERS=false
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    security_opt:
      - seccomp=custom-seccomp.json
    stdin_open: true
    tty: true

volumes:
  tailscale-state: