mkdir -p /opt/stacks/tailscale
cd /opt/stacks/tailscale
docker pull ghcr.io/tailscale/tailscale:latest # pre-load the container
nano compose.yml

---
name: tailscale

services:
  tailscale:
    container_name: tailscale
    image: ghcr.io/tailscale/tailscale:v1.82.0
    restart: unless-stopped
    hostname: rpi5-2.local.irishla.io
    env_file: .env
    volumes:
      - "./tailscale/state:/var/lib/tailscale"
    devices:
      - /dev/net/tun:/dev/net/tun
    cap_add:
      - net_admin

nano .env
# This file is used to set environment variables for the Tailscale Docker container.
TS_AUTHKEY=tskey-client-notAReal-OAuthClientSecret1Atawk
TS_EXTRA_ARGS=--advertise-tags=tag:container
TS_STATE_DIR=/var/lib/tailscale
TS_USERSPACE=false