docker run -d \
  --name derper \
  -e TZ=Asia/Shanghai \
  -e DERP_CERT_MODE=manual \
  -e DERP_ADDR=:10088 \
  -e DERP_HTTP_PORT=-1 \
  -e DERP_STUN_PORT=10089 \
  -e DERP_DOMAIN=your.domain.com \
  -e DERP_VERIFY_CLIENTS=true \
  -v /var/run/tailscale/tailscaled.sock:/var/run/tailscale/tailscaled.sock \
  -v /your/certs/path:/app/certs \
  -p 10088:10088 \
  -p 10089:10089/udp \
  --restart always \
  zhz1021/derper

services:
  derper:
    image: zhz1021/derper
    container_name: derper
    environment:
      - TZ=Asia/Shanghai
      - DERP_CERT_MODE=manual
      - DERP_ADDR=:10088
      - DERP_HTTP_PORT=-1
      - DERP_STUN_PORT=10089
      - DERP_DOMAIN=your.domain.com
      - DERP_VERIFY_CLIENTS=true
    volumes:
      - /var/run/tailscale/tailscaled.sock:/var/run/tailscale/tailscaled.sock
      - ./certs:/app/certs
    ports:
      - 10088:10088
      - 10089:10089/udp
    restart: always