services:
  ts-oauth-test:
    image: tailscale/tailscale:latest
    container_name: ts-oauth-test
    hostname: pentagon-test
    environment:
      - TS_AUTHKEY=[a valid oauth key]
      - TS_EXTRA_ARGS=--advertise-tags=tag:container
      - TS_STATE_DIR=/var/lib/tailscale
      - TS_USERSPACE=false
    volumes:
      - ${PWD}/ts-oauth-test/state:/var/lib/tailscale
    devices:
      - /dev/net/tun:/dev/net/tun
    cap_add:
      - net_admin
    restart: on-failure:1
  nginx-oauth-test:
    image: nginx
    network_mode: service:ts-oauth-test