From 725a23635afe17baf0497c27e70ef0462ad6470f Mon Sep 17 00:00:00 2001
From: Tim Bendt <sirtimbly@gmail.com>
Date: Fri, 20 Feb 2026 17:00:20 -0500
Subject: [PATCH] tailscale start daemon

---
 docker-compose.yml | 10 +++-------
 docker/Dockerfile  |  9 +++++++++
 2 files changed, 12 insertions(+), 7 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 9951258..49dacd2 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -29,13 +29,9 @@ services:
       - dokploy-network
     command:
       [
-        "node",
-        "dist/index.js",
-        "gateway",
-        "--bind",
-        "${OPENCLAW_GATEWAY_BIND:-loopback}",
-        "--port",
-        "18789",
+        "/bin/sh",
+        "-c",
+        "/home/node/.local/bin/tailscale-start.sh && node dist/index.js gateway --bind ${OPENCLAW_GATEWAY_BIND:-loopback} --port 18789",
       ]
     # healthcheck:
     #   test: ["CMD", "healthcheck.sh"]
diff --git a/docker/Dockerfile b/docker/Dockerfile
index 849bb9b..e75f25a 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -33,6 +33,15 @@ RUN GOG_VERSION=$(curl -s https://api.github.com/repos/steipete/gogcli/releases/
 # Install Tailscale
 RUN curl -fsSL https://tailscale.com/install.sh | HEADLESS=true sh
 
+# Create tailscale startup script
+RUN mkdir -p /home/node/.local/bin && \
+    echo '#!/bin/sh' > /home/node/.local/bin/tailscale-start.sh && \
+    echo 'mkdir -p /var/run/tailscale' >> /home/node/.local/bin/tailscale-start.sh && \
+    echo 'tailscaled --socket=/tmp/tailscale.sock --tun=userspace-networking &' >> /home/node/.local/bin/tailscale-start.sh && \
+    echo 'sleep 2' >> /home/node/.local/bin/tailscale-start.sh && \
+    echo 'tailscale --socket=/tmp/tailscale.sock up --authkey=$TAILSCALE_AUTH_KEY' >> /home/node/.local/bin/tailscale-start.sh && \
+    chmod +x /home/node/.local/bin/tailscale-start.sh
+
 # Copy custom tools into the image
 COPY tools/* /usr/local/bin/
 COPY bin/* /usr/local/bin/