.env.example

# Required - generate at https://login.tailscale.com/admin/settings/keys
# Use an OAuth client secret (recommended) or a reusable auth key
TS_AUTHKEY=tskey-auth-xxxx

# The name this node appears as in the Tailscale admin console and MagicDNS
# e.g. truenas-tailscale.your-tailnet.ts.net
TS_HOSTNAME=truenas-tailscale

# Extra flags passed to `tailscale up`
# --advertise-tags=tag:container  applies ACL tags (must be defined in your Tailscale ACLs)
# --advertise-exit-node           enables full-tunnel routing for clients that choose this as an exit node
TS_EXTRA_ARGS=--advertise-exit-node

# Subnet routes to advertise for split-tunnel access
# Comma-separated CIDR ranges. Must be approved in the Tailscale admin console after first run.
TS_ROUTES=10.0.0.0/20