Usage:

docker run intangiblew/docker-derp:latest

Environment variables

Name	Acceptable values	Default
CERTMODE	letsencrypt or manual	letsencrypt
HOSTNAME	string of domain or ip address	derp.tailscale.com
VERIFY_CLIENTS	true or false	false

run with --verify-clients

Run with arg -v /var/run/tailscale:/var/run/tailscale(you need to run tailscale on your host machine), or check docker-compose.yml for further details.

Using custom certificate

Third-party signed certificate

map /etc/derper/certs to the directory where the certificate exists, note the naming pattern.

IP based certificate

Since derper will generate certificate if you set CERTMODE variable to manual, then set HOSTNAME to an IP address, and check the container logs, you will get output like this:

Using self-signed certificate for IP address "x.x.x.x". Configure it in DERPMap using: (https://tailscale.com/s/custom-derp) {"Name":"custom","RegionID":900,"HostName":"x.x.x.x","CertName":"sha256-raw:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"}