version: '3.8'

services:
  headscale:
    image: headscale/headscale:latest
    container_name: headscale
    restart: unless-stopped
    ports:
      - "8081:8080"  # Web UI and API (avoiding conflict with Traefik)
      - "50443:50443"  # gRPC
    volumes:
      - ./headscale/config:/etc/headscale
      - ./headscale/data:/var/lib/headscale
    command: serve
    networks:
      - headscale-net

networks:
  headscale-net:
    driver: bridge