{
  "$schema": "../schema.json",
  "name": "Tailscale",
  "available": true,
  "exposable": false,
  "no_gui": true,
  "port": 8093,
  "id": "tailscale",
  "tipi_version": 30,
  "version": "1.68.1",
  "categories": ["network", "security"],
  "description": "Zero config VPN. Installs on any device in minutes, manages firewall rules for you, and works from anywhere.",
  "short_desc": "The easiest, most secure way to use WireGuard and 2FA.",
  "author": "© Tailscale Inc.",
  "source": "https://github.com/tailscale/tailscale",
  "website": "https://tailscale.com/",
  "form_fields": [
    {
      "type": "boolean",
      "label": "TS_ACCEPT_DNS > Accept DNS configuration from the admin console. Not accepted by default.",
      "env_variable": "TAILSCALE_ACCEPT_DNS"
    },
    {
      "type": "boolean",
      "label": "TS_AUTH_ONCE > Attempt to log in only if not already logged in. False by default, to forcibly log in every time the container starts.",
      "env_variable": "TAILSCALE_AUTH_ONCE"
    },
    {
      "type": "text",
      "label": "TS_AUTHKEY > An auth key used to authenticate the container. It is also possible to use an OAuth client secret. To mark a containerized node as ephemeral append ?ephemeral=true to the auth key or OAuth client secret.",
      "placeholder": "tskey-abcdef1432341818",
      "env_variable": "TAILSCALE_AUTHKEY"
    },
    {
      "type": "text",
      "label": "TS_HOSTNAME > Use the specified hostname for the node.",
      "placeholder": "runtipi",
      "env_variable": "TAILSCALE_HOSTNAME"
    },
    {
      "type": "text",
      "label": "TS_ROUTES > Advertise subnet routes. To accept advertised routes, use TS_EXTRA_ARGS to pass in --accept-routes.",
      "placeholder": "10.0.0.0/8,192.168.0.0/24",
      "env_variable": "TAILSCALE_ROUTES"
    },
    {
      "type": "text",
      "label": "TS_SERVE_CONFIG > Accepts a JSON file to programatically configure Serve and Funnel functionality. Located in app-data/tailscale/data/config/*",
      "placeholder": "/config/serve-config.json",
      "env_variable": "TAILSCALE_SERVE_CONFIG"
    },
    {
      "type": "text",
      "label": "TS_EXTRA_ARGS > Any other flags to pass in to the Tailscale CLI.",
      "placeholder": "--accept-routes --advertise-tags=tag:container",
      "env_variable": "TAILSCALE_EXTRA_ARGS"
    },
    {
      "type": "boolean",
      "label": "TS_USERSPACE > Enable userspace networking, instead of kernel networking. Enabled by default.",
      "env_variable": "TAILSCALE_USERSPACE"
    }
  ],
  "supported_architectures": ["arm64", "amd64"]
}