services:
  vaultwarden-ts:
    image: tailscale/tailscale:latest
    hostname: vaultwarden
    container_name: vaultwarden-ts
    environment:
      - TS_AUTHKEY={{YOUR_TAILSCALE_AUTHKEY}}
      - TS_STATE_DIR=/var/lib/tailscale
      - TS_SERVE_CONFIG=/config/serve.json
    volumes:
      - ./tailscale/tailscale-data:/var/lib/tailscale
      - ./tailscale/config:/config
      - /dev/net/tun:/dev/net/tun
    cap_add:
      - net_admin
      - sys_module
    restart: unless-stopped
  vaultwarden:
    image: vaultwarden/server:latest
    container_name: vaultwarden
    restart: always
    environment:
      DOMAIN: "https://vaultwarden.{{YOUR_DOMAIN}}.ts.net"      # <---- Your domain here! --- ie https://vaultwarden.tail123456.ts.net/
      ADMIN_TOKEN: "an-incredibly-complex-password-is-required" # <---- Insert complex password
    volumes: 
      - ./vaultwarden/data:/data
    network_mode: service:vaultwarden-ts
    depends_on: 
      - vaultwarden-ts