Davide Polonio
ddc7e5a1b6
- Run tailscaled with --netfilter-mode=off to avoid iptables failures in the container, which were breaking the MagicDNS proxy at 100.100.100.100 - Set dns: 100.100.100.100 so Docker forwards DNS queries to Tailscale's MagicDNS proxy instead of Contabo's public DNS, which was resolving ollama.lan.poldebra.me to the server's public IP instead of the tailnet IP
52 lines
1.2 KiB
YAML
52 lines
1.2 KiB
YAML
services:
|
|
patrizio:
|
|
image: ghcr.io/polpetta/patrizio-bot:v0.2.0
|
|
network_mode: service:tailscale
|
|
restart: unless-stopped
|
|
command: -f /data/ serve
|
|
volumes:
|
|
- ./data:/data:rw
|
|
- ./patrizio.toml:/etc/patrizio/patrizio.toml:ro
|
|
depends_on:
|
|
tailscale:
|
|
condition: service_healthy
|
|
logging:
|
|
driver: "json-file"
|
|
options:
|
|
mode: "non-blocking"
|
|
max-size: "10m"
|
|
max-file: "3"
|
|
tailscale:
|
|
hostname: patrizio
|
|
image: tailscale/tailscale:latest
|
|
restart: unless-stopped
|
|
dns:
|
|
- 100.100.100.100
|
|
env_file:
|
|
- tailscale.env
|
|
command: >
|
|
sh -c "tailscaled --netfilter-mode=off &
|
|
sleep 5 &&
|
|
tailscale up --accept-dns=true --login-server=https://vpn.poldebra.me &&
|
|
wait"
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "tailscale status"]
|
|
interval: 1s
|
|
timeout: 5s
|
|
retries: 60
|
|
volumes:
|
|
- /srv/docker/patrizio/tailscale:/var/lib
|
|
- /lib/modules:/lib/modules:ro
|
|
devices:
|
|
- /dev/net/tun:/dev/net/tun
|
|
cap_add:
|
|
- net_admin
|
|
- sys_module
|
|
- net_raw
|
|
logging:
|
|
driver: "json-file"
|
|
options:
|
|
mode: "non-blocking"
|
|
max-size: "10m"
|
|
max-file: "3"
|