Baikal Docker + Tailscale

Hello. I am currently switching my Docker to Tailscale. Only Baikal is causing problems.

I installed Baikal via the community apps.

https://github.com/ckulka/baikal-docker

This is the docker run:

docker run
  -d
  --name='baikal-test'
  --entrypoint='/opt/unraid/tailscale'
  --net='eth0'
  --ip='192.168.178.240'
  --pids-limit 2048
  -e TZ="Europe/Berlin"
  -e HOST_OS="Unraid"
  -e HOST_HOSTNAME="Unraid"
  -e HOST_CONTAINERNAME="baikal-test"
  -e 'TCP_PORT_80'='80'
  -e 'CA_TS_FALLBACK_DIR'='/var/www/baikal-test/config'
  -e TAILSCALE_HOSTNAME='baikal-test'
  -e TAILSCALE_ALLOW_LAN_ACCESS='false'
  -e TAILSCALE_USE_SSH='false'
  -e TAILSCALE_USERSPACE_NETWORKING='false'
  -e TAILSCALE_SERVE_PORT='80'
  -e ORG_ENTRYPOINT="/docker-entrypoint.sh"
  -e ORG_CMD="nginx
  -g daemon off;"
  -l net.unraid.docker.managed=dockerman
  -l net.unraid.docker.webui='http://[IP]:[PORT:80]/'
  -l net.unraid.docker.icon='https://raw.githubusercontent.com/Joshndroid/joshndroid-unraid-docker-templates/main/icons/baikal.png'
  -l net.unraid.docker.tailscale.webui='https://[hostname][magicdns]/'
  -l net.unraid.docker.tailscale.hostname='baikal-test'
  -v '/mnt/user/appdata/baikal-test/config':'/var/www/baikal/config':'rw'
  -v '/mnt/user/appdata/baikal-test/specific':'/var/www/baikal/Specific':'rw'
  -v '/usr/local/share/docker/tailscale_container_hook':'/opt/unraid/tailscale'
  --cap-add=NET_ADMIN
  --device='/dev/net/tun'
  --restart=always 'ckulka/baikal:nginx'
99c48d91075ea18b06b2a548ea58afb62edd0dd3465ccfc5384ec4631b85d2ad

The command finished successfully!

This is the Baikal log:

Tailscale found, continuing...
Settings Tailscale state dir to: /var/www/baikal-test/config/.tailscale_state
Setting host name to "baikal-test"
Starting tailscaled with log file location: /var/log/tailscaled
Starting tailscale
Some peers are advertising routes but --accept-routes is false
WARNING: Tailscale Key will expire in 179 days.
         Navigate to https://login.tailscale.com/admin/machines and 'Disable Key Expiry' for baikal-test
See: https://tailscale.com/kb/1028/key-expiry
Enabling Serve! See https://tailscale.com/kb/1312/serve
Available within your tailnet:

https://baikal-test.*******.ts.net/
|-- proxy http://localhost:80

Serve started and running in the background.
Starting container...

=======================

/docker-entrypoint.sh: /docker-entrypoint.d/ is not empty, will attempt to perform configuration
/docker-entrypoint.sh: Looking for shell scripts in /docker-entrypoint.d/
/docker-entrypoint.sh: Launching /docker-entrypoint.d/10-listen-on-ipv6-by-default.sh
10-listen-on-ipv6-by-default.sh: info: Getting the checksum of /etc/nginx/conf.d/default.conf
10-listen-on-ipv6-by-default.sh: info: /etc/nginx/conf.d/default.conf differs from the packaged version
/docker-entrypoint.sh: Sourcing /docker-entrypoint.d/15-local-resolvers.envsh
/docker-entrypoint.sh: Launching /docker-entrypoint.d/20-envsubst-on-templates.sh
/docker-entrypoint.sh: Launching /docker-entrypoint.d/30-apply-home-assistant-fix.sh
/docker-entrypoint.sh: Launching /docker-entrypoint.d/30-create-baikal-database-folder.sh
/docker-entrypoint.sh: Launching /docker-entrypoint.d/30-tune-worker-processes.sh
/docker-entrypoint.sh: Launching /docker-entrypoint.d/40-disable-nginx-ipv6-if-unsupported.sh
/docker-entrypoint.sh: Launching /docker-entrypoint.d/40-fix-baikal-file-permissions.sh
/docker-entrypoint.sh: Launching /docker-entrypoint.d/40-php-fpm.sh
/docker-entrypoint.sh: Launching /docker-entrypoint.d/50-start-msmtp.sh
/docker-entrypoint.sh: Ignoring /docker-entrypoint.d/Plugin-with-home-assistant-fix.php
/docker-entrypoint.sh: Configuration complete; ready for start up
=======================

Executing Unraid Docker Hook for Tailscale

Tailscale found, continuing...
Settings Tailscale state dir to: /var/www/baikal-test/config/.tailscale_state
Setting host name to "baikal-test"
Starting tailscaled with log file location: /var/log/tailscaled
Starting tailscale
Some peers are advertising routes but --accept-routes is false
WARNING: Tailscale Key will expire in 179 days.
         Navigate to https://login.tailscale.com/admin/machines and 'Disable Key Expiry' for baikal-test
See: https://tailscale.com/kb/1028/key-expiry
Enabling Serve! See https://tailscale.com/kb/1312/serve
Available within your tailnet:

https://baikal-test.****.ts.net/
|-- proxy http://localhost:80

Serve started and running in the background.
Starting container...

=======================

/docker-entrypoint.sh: /docker-entrypoint.d/ is not empty, will attempt to perform configuration
/docker-entrypoint.sh: Looking for shell scripts in /docker-entrypoint.d/
/docker-entrypoint.sh: Launching /docker-entrypoint.d/10-listen-on-ipv6-by-default.sh
10-listen-on-ipv6-by-default.sh: info: Getting the checksum of /etc/nginx/conf.d/default.conf
10-listen-on-ipv6-by-default.sh: info: /etc/nginx/conf.d/default.conf differs from the packaged version
/docker-entrypoint.sh: Sourcing /docker-entrypoint.d/15-local-resolvers.envsh
/docker-entrypoint.sh: Launching /docker-entrypoint.d/20-envsubst-on-templates.sh
/docker-entrypoint.sh: Launching /docker-entrypoint.d/30-apply-home-assistant-fix.sh
/docker-entrypoint.sh: Launching /docker-entrypoint.d/30-create-baikal-database-folder.sh
/docker-entrypoint.sh: Launching /docker-entrypoint.d/30-tune-worker-processes.sh
/docker-entrypoint.sh: Launching /docker-entrypoint.d/40-disable-nginx-ipv6-if-unsupported.sh
/docker-entrypoint.sh: Launching /docker-entrypoint.d/40-fix-baikal-file-permissions.sh
/docker-entrypoint.sh: Launching /docker-entrypoint.d/40-php-fpm.sh
/docker-entrypoint.sh: Launching /docker-entrypoint.d/50-start-msmtp.sh
/docker-entrypoint.sh: Ignoring /docker-entrypoint.d/Plugin-with-home-assistant-fix.php
/docker-entrypoint.sh: Configuration complete; ready for start up

Does Baikal Docker not work with Tailscale? It seems as if the Docker keeps restarting.