- Minor
Hi!
I tried to follow space invaders Route Containers Through WireGuard – Advanced Docker Networking guide, but could not reach any docker containers on my lan after setting them up using the bult in vpn tunnel. Problem is when setting up vpn tunneled access for docker post up post down settings are created in the vpn conf file to exempt the lan ip range but not the tailscale one. Now that tailscale is built in they should probably also be except by default or you will have a loot of users wondering why this is not working as expected. You don't have to use a exit node for the dockers to be unreachable on lan if you have tailscale running, if not setting up the exceptions you just have to have the use tailscale subnets option ticked for them to be unreachable.
When adding these lines to the conf file everything works as expected and should probobly be set by default or set after checking what ip range tailscale is using:
PostUp=ip -4 route add 100.64.0.0/10 dev tailscale1 table 200 || true
PostDown=ip -4 route del 100.64.0.0/10 dev tailscale1 table 200 || true