fix: use TS_AUTHKEY and TS_LOGIN_SERVER environment variables

- docker-compose.yml: read authkey and login server from env
- README.md: updated instructions to use env vars instead of editing the file
- Added .gitignore for secrets and Tailscale state

README.md

@@ -33,7 +33,7 @@ ts-{{service}}/
     mkdir -p tailscale/tailscale-data
     ```
 3. Configure Tailscale
-    - Replace `{{YOUR_TAILSCALE_AUTHKEY}}` in the docker-compose.yml with your actual Tailscale auth key
+    - Make sure `TS_AUTHKEY` and `TS_LOGIN_SERVER` are set in your environment (or a local .env file) before running docker compose.
     - Optionally, update the file in `tailscale/config/serve.json` if you need specific Tailscale serve configurations
         - CAUTION: Changing `"${TS_CERT_DOMAIN}:443": false` to `true` will expose the service to the internet