tailscale derp节点,必须配置https环境,每24小时自动下载一次证书对比本地证书,有更新自动替换证书重启derp。 compose示例如下:
version: "3"
services:
tailscale-derper:
container_name: tailscale-derper
image: badgv/myderper:latest
network_mode: bridge
ports:
- "2024:2024" #tls端口,默认443
- "2024:2024/udp" #stun端口,默认3478
environment:
- DERP_DOMAIN=derp.xxx.com #必要参数
- DERP_CERTMODE=manual #默认值 letsencrypt
- DERP_SSLPORT=:2024 #格式要求 ":<port>" ,默认值":443"
- DERP_STUNPORT=2024 #格式要求 "<port>" ,默认值"3478"
- DERP_HTTPPORT=2026 #格式要求“<port> 或 -1”,默认值-1,禁用http,版本>1.97.0_1才能使用此参数
- DERP_SSLURL=https://downcert.xxx.com #DERP_CERTMODE指定为manual时,且未使用volumes映射证书时,用来下载证书的前缀
- DERP_SSLCERTNAME=cert.cer #和DERP_SSLURL组合成证书下载链接:https://downcert.xxx.com/cert.cer
- DERP_SSLKEYNAME=cert.key #和DERP_SSLURL组合成密钥下载链接:https://downcert.xxx.com/cert.key
- DERP_VERIFYCLIENT=false #默认false,可设置true
restart: unless-stopped
logging:
driver: "json-file"
options:
max-size: "1m"
max-file: "1"
可映射证书路径如下:
volumes:
- /home/acme.sh/cert.cer:/app/cert/<DERP_DOMAIN>.crt
- /home/acme.sh/cert.key:/app/cert/<DERP_DOMAIN>.key
Content type
Image
Digest
sha256:69cb8f081…
Size
17.4 MB
Last updated
6 months ago
docker pull badgv/myderper