feat: tailscale sidecar

ai/compose.yaml

@@ -122,8 +122,8 @@ services:
       ]
     depends_on:
       - ai_postgres
-    networks:
-      - compose_network
+    # networks:
+    #   - compose_network
     healthcheck:
       disable: true
     labels:
@@ -195,8 +195,8 @@ services:
     volumes:
       - ./nginx.conf.template:/etc/nginx/nginx.conf.template:ro
     command: /bin/sh -c "envsubst '$${GPU_SERVICE_HOST},$${GPU_SERVICE_PORT}' < /etc/nginx/nginx.conf.template > /etc/nginx/nginx.conf && exec nginx -g 'daemon off;'"
-    networks:
-      - compose_network
+    # networks:
+    #   - compose_network
     labels:
       - "traefik.enable=${AI_COMFYUI_TRAEFIK_ENABLED:-true}"
       # HTTP to HTTPS redirect
@@ -228,8 +228,8 @@ services:
     volumes:
       - ./nginx.conf.template:/etc/nginx/nginx.conf.template:ro
     command: /bin/sh -c "envsubst '$${GPU_SERVICE_HOST},$${GPU_SERVICE_PORT}' < /etc/nginx/nginx.conf.template > /etc/nginx/nginx.conf && exec nginx -g 'daemon off;'"
-    networks:
-      - compose_network
+    # networks:
+    #   - compose_network
     labels:
       - "traefik.enable=${AI_AUDIOCRAFT_TRAEFIK_ENABLED:-true}"
       # HTTP to HTTPS redirect
@@ -261,8 +261,8 @@ services:
     volumes:
       - ./nginx.conf.template:/etc/nginx/nginx.conf.template:ro
     command: /bin/sh -c "envsubst '$${GPU_SERVICE_HOST},$${GPU_SERVICE_PORT}' < /etc/nginx/nginx.conf.template > /etc/nginx/nginx.conf && exec nginx -g 'daemon off;'"
-    networks:
-      - compose_network
+    # networks:
+    #   - compose_network
     labels:
       - "traefik.enable=${AI_UPSCALE_TRAEFIK_ENABLED:-true}"
       # HTTP to HTTPS redirect
@@ -295,8 +295,8 @@ services:
       SUPERVISOR_HOST: ${GPU_TAILSCALE_HOST}
       SUPERVISOR_PORT: ${SUPERVISOR_BACKEND_PORT:-9001}
       # No auth needed - Supervisor has auth disabled (protected by Authelia)
-    networks:
-      - compose_network
+    # networks:
+    #   - compose_network
     labels:
       - "traefik.enable=${AI_SUPERVISOR_TRAEFIK_ENABLED:-true}"
       # HTTP to HTTPS redirect

net/compose.yaml

@@ -321,6 +321,8 @@ services:
       - TS_AUTHKEY=${TAILSCALE_AUTHKEY}
       - TS_STATE_DIR=/var/lib/tailscale
     restart: unless-stopped
+    networks:
+      - compose_network
 
 volumes:
   letsencrypt_data: