version: "3.8"

services:
  derper:
    build:
      context: .
      dockerfile: Dockerfile
    image: hotwa/derper:latest
    container_name: derper
    restart: unless-stopped
    env_file:
      - derper.env
    ports:
      - "3477:3477"
      - "3478:3478/udp"
    volumes:
      - ./letsencrypt:/etc/letsencrypt
      - ./certs:/app/certs
      - ./logs:/var/log/certbot
      - /var/run/tailscale/tailscaled.sock:/var/run/tailscale/tailscaled.sock:ro
      # tailscale login first require
    entrypoint: [""]
    command:
      - /bin/bash
      - -c
      - |
          /app/derper \
          -hostname headscale.jmsu.top \
          -certdir /app/certs \
          -certmode manual \
          -a :3477 \
          -stun-port 3478 \
          -http-port -1 \
          -verify-clients