diff --git a/tailscale/.env.example b/tailscale/.env.example
new file mode 100644
index 0000000..ad82e8d
--- /dev/null
+++ b/tailscale/.env.example
@@ -0,0 +1 @@
+TS_AUTHKEY=tskey-auth-xxxxx-CNTRL
diff --git a/tailscale/compose.yaml b/tailscale/compose.yaml
new file mode 100644
index 0000000..8f8f8b8
--- /dev/null
+++ b/tailscale/compose.yaml
@@ -0,0 +1,21 @@
+services:
+  tailscale:
+    image: tailscale/tailscale:latest
+    container_name: tailscale
+    network_mode: host
+    restart: unless-stopped
+    cap_add:
+      - NET_ADMIN
+      - NET_RAW
+    volumes:
+      - tailscale_data:/var/lib/tailscale
+      - /dev/net/tun:/dev/net/tun
+    environment:
+      - TS_AUTHKEY=${TS_AUTHKEY}
+      - TS_STATE_DIR=/var/lib/tailscale
+      - TS_HOSTNAME=forust-server
+      # - TS_EXTRA_ARGS=--advertise-tags=tag:container
+
+volumes:
+  tailscale_data:
+    name: tailscale_data