Getting Started
Quick Start
Using Docker Compose, you can easily configure the proxy to your Tailscale containers. Here’s an example of how you can configure your services using Docker Compose:
Create a TSDProxy docker-compose.yaml
services:
tsdproxy:
image: almeidapaulopt/tsdproxy:2
volumes:
- /var/run/docker.sock:/var/run/docker.sock
- datadir:/data
- <PATH_TO_YOUR_CONFIG_DIR>:/config
restart: unless-stopped
ports:
- "8080:8080"
volumes:
datadir:
Start the TSDProxy container
docker compose up -d
Configure TSDProxy
After the TSDProxy container is started, a configuration file
/config/tsdproxy.yaml
is created and populated with the following:
/config/tsdproxy.yaml
defaultProxyProvider: default
docker:
local: # name of the docker target provider
host: unix:///var/run/docker.sock # host of the docker socket or daemon
targetHostname: 172.31.0.1 # hostname or IP of docker server
defaultProxyProvider: default # name of which proxy provider to use
lists: {}
tailscale:
providers:
default: # name of the provider
authKey: "" # optional, define authkey here
authKeyFile: "" # optional, use this to load authkey from file. If this is defined, Authkey is ignored
controlUrl: https://controlplane.tailscale.com # use this to override the default control URL
dataDir: /data/
http:
hostname: 0.0.0.0
port: 8080
log:
level: info # set logging level info, error or trace
json: false # set to true to enable json logging
proxyAccessLog: true # set to true to enable container access log
Edit the configuration file
- Change your docker host if you are not using the socket.
- Restart the service if you changed the configuration.
docker compose restart
Run a sample service
Here we’ll use the nginx image to serve a sample service.
The container name is sample-nginx
, expose port 8111, and add the
tsdproxy.enable
label.
docker run -d --name sample-nginx -p 8111:80 --label "tsdproxy.enable=true" nginx:latest
Open Dashboard
- Visit the dashboard at http://<IP_ADDRESS>:8080.
- Sample-nginx should appear in the dashboard. Click the button and authenticate with Tailscale.
- After authentication, the proxy will be enabled.
Important
The first time you run the proxy, it will take a few seconds to start, because it needs to connect to the Tailscale network, generate the certificates, and start the proxy.
Last updated on