From 7babf8181122a762c1b15dd9070241e34da1bfb8 Mon Sep 17 00:00:00 2001
From: Ognir <tortosaantonio@gmail.com>
Date: Mon, 5 Jan 2026 21:43:18 +0100
Subject: [PATCH] =?UTF-8?q?A=C3=B1adido=20contenedor=20de=20Tailscale=20pa?=
 =?UTF-8?q?ra=20acceso=20VPN=20seguro?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 tailscale/docker-compose.yml | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100755 tailscale/docker-compose.yml

diff --git a/tailscale/docker-compose.yml b/tailscale/docker-compose.yml
new file mode 100755
index 0000000..be80100
--- /dev/null
+++ b/tailscale/docker-compose.yml
@@ -0,0 +1,23 @@
+# ==============================================================================
+# TAILSCALE - NODO DE RED DE GESTIÓN (REVISADO)
+# ==============================================================================
+version: "3.9"
+
+services:
+  tailscale:
+    image: tailscale/tailscale:latest
+    container_name: tailscale
+    hostname: ognir-nas-tailnet
+    restart: always
+    # Usamos network host para integrarnos en la pila de red del NAS
+    network_mode: host
+    privileged: true # Esto otorga acceso al TUN del kernel sin mapeos manuales
+    cap_add:
+      - NET_ADMIN
+      - SYS_MODULE
+    volumes:
+      - /volume1/docker/data/tailscale:/var/lib/tailscale
+      # Eliminamos el mapeo de /dev/net/tun que daba error
+    environment:
+      - TS_USERSPACE=false
+      - TS_STATE_DIR=/var/lib/tailscale