DockTail Documentation

DockTail exposes Docker containers as Tailscale Services using label-based configuration. It watches Docker events, reads docktail.* labels, and advertises matching containers through the local Tailscale daemon.

Why DockTail?

DockTail uses native Tailscale Services, not per-container Tailscale devices.

DockTail TSDProxy ScaleTail tsbridge Plain Services
Native Tailscale Services ✅ ❌ ❌ ❌ ✅
Configured via Docker labels ✅ ✅ ❌ ✅ ❌
Apps do not consume separate Tailscale device slots iDockTail advertises apps as services from one tagged host instead of creating a separate Tailscale device identity per app. Exact plan limits depend on Tailscale. ✅ ❌ ❌ ❌ ✅
No app port publishing ✅ ⚠️iDepends on proxy and Docker network setup. ⚠️iDepends on the sidecar template and app network setup. ⚠️iDepends on proxy and Docker network setup. ⚠️iYou configure how the service host reaches the backend yourself.
Automatic Docker reconciliation ✅ ✅ ❌ ✅ ❌
Low manual setup after install ✅ ✅ ⚠️iScaleTail is template-based, so each app usually starts from its own Compose recipe. ✅ ❌

What DockTail Does

  • Discovers labeled Docker containers automatically.
  • Proxies directly to container IPs by default, so app containers do not need published Docker ports.
  • Advertises HTTP, HTTPS, TCP, and TLS-terminated TCP services through Tailscale.
  • Supports Tailscale HTTPS with automatic certificates.
  • Supports Tailscale Funnel for public internet access.
  • Supports multiple Tailscale services from one container.
  • Reconciles state when containers restart and container IPs change.
  • Runs as a stateless Docker container.
  • Optionally reports to DockTail Cloud, a paid hosted service, for multi-host monitoring and alerting. Opt-in via one environment variable; inert when unset.
  1. Start with Quick Start for a minimal Compose setup.
  2. Read Installation for host Tailscale and sidecar options, Platform Guides for Podman, NAS systems, macOS, Windows, Swarm and Kubernetes, and Hardening to narrow what DockTail can reach.
  3. Configure Tailscale permissions in Tailscale Admin Setup.
  4. Use Labels and Examples when exposing real services.
  5. See DockTail Cloud if you want monitoring and alerting across your hosts.
  6. Check Reference for all labels, environment variables, protocols, and behavior notes, and How It Works for the reconciliation loop.
  7. Follow a how-to guide for a complete setup of a specific app, such as Jellyfin or Home Assistant, or for moving over from TSDProxy.
docktail
GitHub Docs Cloud Markdown Agents Tailscale Services
AGPL v3 · built by marvinvr · generated 2026-11-04 Featured on Tailscale Community Projects