version: "3.8"

services:
  tailscale:
    image: tailscale/tailscale:latest
    hostname: comfyui
    environment:
      - TS_AUTHKEY=tskey-auth-kNm64Dbcts11CNTRL-4eLQjm2pQYCLdy285gNaYCFDF1KTjP71
      - TS_STATE_DIR=/var/lib/tailscale
      - TS_USERSPACE=false
    volumes:
      - ./tailscale-state:/var/lib/tailscale
      - ./tailscale-entrypoint.sh:/entrypoint.sh:ro
    devices:
      - /dev/net/tun:/dev/net/tun
    cap_add:
      - net_admin
      - net_raw
    restart: unless-stopped
    entrypoint: ["/bin/sh", "/entrypoint.sh"]

  nginx:
    image: nginx:latest
    depends_on:
      - tailscale
    restart: unless-stopped
    volumes:
      - ./nginx.conf:/etc/nginx/nginx.conf:ro
      - ./.htpasswd:/etc/nginx/.htpasswd:ro
    network_mode: service:tailscale

volumes:
  tailscale-state:
    driver: local