@@ -205,7 +205,7 @@ Even if intercepted: unreadable gibberish
205205
206206** Tailscale Client**
207207- VPN client that connects to Headscale
208- - Runs in each container (installed via ` hack/docker/Dockerfile.tunnel ` )
208+ - Runs in each container (installed via ` hack/docker/Dockerfile.server- tunnel ` )
209209- Joins the mesh, creates tunnel interface
210210
211211** Your Application = Controller**
@@ -237,7 +237,7 @@ Daemon → Internet → Controller (public IP:8765)
237237
238238```
239239
240- ** Key:** ` hack/docker/Dockerfile.tunnel ` installs ** Tailscale client** (not Headscale server). Headscale runs separately.
240+ ** Key:** ` hack/docker/Dockerfile.server- tunnel ` installs ** Tailscale client** (not Headscale server). Headscale runs separately.
241241
242242---
243243
@@ -263,7 +263,7 @@ server = Server(connect="tunnel", tunnel_config=config)
263263
264264Use the tunnel-enabled image. Build it yourself like this:
265265``` bash
266- docker build -f hack/docker/Dockerfile.tunnel -t my-app:tunnel .
266+ docker build -f hack/docker/Dockerfile.server- tunnel -t my-app:tunnel .
267267```
268268
269269### Running
@@ -284,7 +284,7 @@ docker run \
284284
285285``` bash
286286# From SandD repo
287- docker build -f hack/docker/Dockerfile.tunnel -t inftyai/sandd-server:latest-tunnel .
287+ docker build -f hack/docker/Dockerfile.server- tunnel -t inftyai/sandd-server:latest-tunnel .
288288```
289289
290290### 2. Run Headscale
@@ -543,7 +543,7 @@ A: Attacker can join your mesh. Use single-use keys and revoke immediately if le
543543** Q: Why not install Headscale in my container?**
544544A: Headscale is a coordination server - you only need one for the entire mesh. Like DNS: one server, many clients.
545545
546- ** Q: What's in ` hack/docker/Dockerfile.tunnel ` ?**
546+ ** Q: What's in ` hack/docker/Dockerfile.server- tunnel ` ?**
547547A: Python 3.11, SandD library, and Tailscale client (not Headscale server).
548548
549549** Q: Do I need NET_ADMIN?**
0 commit comments