ISOT

Ok disregard. Enabled "Host has access to custom networks" in docker config, working now. 8 year unraid user, feel dumb now.

I setup tailscale to push routes, and I can ping physical computers and virtual machines, but not any docker containers? I imagine thats largely because the dockers don't have MAC addresses due to being on ipvlan? How can I make it so I can ping/access web gui of docker containers. .99 is a VM on the unraid server running tailscale. .6 is another unraid server on the same physical network. .11 is a nextcloud docker on the unraid server running tailscale. Is it because my br0 docker network is the same network as my physical network? (See third screenshot)

Great!

Not sure mine is correct, but mine has ca.key and identity.key that yours seems to be missing.