version: "3.9"
services:
  headscale:
    image: swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/headscale/headscale:v0.23.0-beta2
    container_name: headscale
    restart: unless-stopped
    environment:
      - HEADSCALE_API_KEY=QC33VFzaUw.u1qwXFap0QpFAQnwkdGuUyvpspL15185A5JnWeFpt_c
    command: serve --config /etc/headscale/config.yaml
    volumes:
      - ./data/headscale:/var/lib/headscale
      - ./config.yaml:/etc/headscale/config.yaml
    ports:
      - "3008:8080"      # Headscale API (HTTP)
      - "3009:8443"      # Headscale API (HTTPS)
      - "9090:9090"      # Metrics
      - "3478:3478/udp"  # STUN UDP
      - "3478:3478/tcp"  # STUN TCP
      - "50443:50443"    # gRPC
    cap_add:
      - NET_ADMIN
    sysctls:
      - net.ipv4.ip_forward=1