tailscale start daemon

docker-compose.yml

@@ -29,13 +29,9 @@ services:
       - dokploy-network
     command:
       [
-        "node",
+        "/bin/sh",
-        "dist/index.js",
+        "-c",
-        "gateway",
+        "/home/node/.local/bin/tailscale-start.sh && node dist/index.js gateway --bind ${OPENCLAW_GATEWAY_BIND:-loopback} --port 18789",
-        "--bind",
-        "${OPENCLAW_GATEWAY_BIND:-loopback}",
-        "--port",
-        "18789",
       ]
     # healthcheck:
     #   test: ["CMD", "healthcheck.sh"]

docker/Dockerfile

@@ -33,6 +33,15 @@ RUN GOG_VERSION=$(curl -s https://api.github.com/repos/steipete/gogcli/releases/
 # Install Tailscale
 RUN curl -fsSL https://tailscale.com/install.sh | HEADLESS=true sh
 
+# Create tailscale startup script
+RUN mkdir -p /home/node/.local/bin && \
+    echo '#!/bin/sh' > /home/node/.local/bin/tailscale-start.sh && \
+    echo 'mkdir -p /var/run/tailscale' >> /home/node/.local/bin/tailscale-start.sh && \
+    echo 'tailscaled --socket=/tmp/tailscale.sock --tun=userspace-networking &' >> /home/node/.local/bin/tailscale-start.sh && \
+    echo 'sleep 2' >> /home/node/.local/bin/tailscale-start.sh && \
+    echo 'tailscale --socket=/tmp/tailscale.sock up --authkey=$TAILSCALE_AUTH_KEY' >> /home/node/.local/bin/tailscale-start.sh && \
+    chmod +x /home/node/.local/bin/tailscale-start.sh
+
 # Copy custom tools into the image
 COPY tools/* /usr/local/bin/
 COPY bin/* /usr/local/bin/