v2

tailscale/docker-compose.yml

@@ -0,0 +1,48 @@
+version: "3.9"
+services:
+  headscale:
+    image: swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/headscale/headscale:v0.23.0-beta2
+    container_name: headscale
+    restart: unless-stopped
+    environment:
+      - HEADSCALE_API_KEY=QC33VFzaUw.u1qwXFap0QpFAQnwkdGuUyvpspL15185A5JnWeFpt_c  # Revert to original variable name
+    command: serve --config /etc/headscale/config.yaml  # 明确指定配置文件路径
+    volumes:
+      - ./data/headscale:/var/lib/headscale
+      # 修正挂载路径冲突问题 ↓      
+      - ./config.yaml:/etc/headscale/config.yaml  # 删除这行
+    ports:
+      - "3008:8080"  # Headscale API端口
+      - "9090:9090"  # Metrics监控端口
+      - "50443:50443"  # DERP中继端口（可选，若Derper独立部署则无需映射）
+    cap_add:
+      - NET_ADMIN
+    sysctls:
+      - net.ipv4.ip_forward=1
+      
+  
+    
+
+  # derper:
+  #   image: swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/yangchuansheng/ip_derper:latest
+  #   container_name: derper
+  #   restart: unless-stopped
+  #   network_mode: host  # 绑定宿主机网络
+  #   environment:
+  #     - DERP_ADDR=:12345  # DERP监听地址（TCP）
+  #     - DERP_STUN_ADDR=:3478  # STUN监听地址（UDP）
+  #     - DERP_CERTS=/app/certs  # 证书路径（自签名需挂载）
+  #     - DERP_VERIFY_CLIENTS=false  # 允许匿名中继（生产环境建议启用验证）
+  #   volumes:
+  #     - ./certs/derper:/app/certs  # 自签名证书挂载（可选）
+
+  headscale-ui:
+    image: swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/gurucomputing/headscale-ui:2024.02.24-beta1
+    container_name: headscale-ui
+    restart: unless-stopped
+    environment:
+      - HTTP_PORT=8000
+      - HEADSCALE_API_URL=http://headscale:8080
+      - HEADSCALE_API_KEY=QC33VFzaUw.u1qwXFap0QpFAQnwkdGuUyvpspL15185A5JnWeFpt_c  # Revert to original variable name
+    ports:
+      - "8000:8000"  # 访问地址：http://<服务器IP>:8000/web