public_git/bambuddy
1
0
Fork 0
mirror of https://github.com/maziggy/bambuddy.git synced 2026-10-20 09:03:43 +02:00
Code Issues Packages Projects Releases Wiki Activity

feat(docker): Tailscale integration support via host socket mount

Browse Source 
Add the Tailscale CLI to the production image and document how to
  enable Let's Encrypt cert provisioning for virtual printers from a
  Docker-deployed Bambuddy.

  - Dockerfile installs `tailscale` from the official Debian repo. Only
    the CLI is used at runtime; tailscaled itself stays on the host.
    The binary is harmless if the socket isn't mounted — the code logs
    an actionable hint and falls back to self-signed certs.
  - docker-compose.yml adds a commented-out volume mount for
    /var/run/tailscale/tailscaled.sock with inline setup instructions.
  - tailscale.py's docker-socket hint now also fires when the binary is
    present but the daemon socket is unreachable (i.e. the new Docker
    pattern), not just when the binary is missing, so users get the
    actionable "mount the socket" message instead of opaque CLI stderr.

  Enabling the integration on a Docker host:
    1. `curl -fsSL https://tailscale.com/install.sh | sh` on host
    2. `sudo tailscale up`
    3. `sudo tailscale set --operator=<user>` for the container PUID
    4. Uncomment the tailscaled.sock mount in docker-compose.yml
    5. `docker compose up -d --force-recreate`
    6. Flip the Tailscale toggle on the VP card
This commit is contained in:
maziggy
2026-04-24 12:01:22 +02:00
parent a00ce61064
commit e927ccefb1
3 changed files with 38 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/app/services/virtual_printer/tailscale.py
+15 -3
View File
@@ -92,13 +92,21 @@ class TailscaleService:
@classmethod
def _log_docker_socket_hint(cls) -> None:
"""Log a one-time hint when running in Docker without the Tailscale socket mounted."""
"""Log a one-time hint when running in Docker without the Tailscale socket mounted.
Fires in both states: (a) tailscale binary missing and (b) binary present
but the host socket isn't mounted into the container. The binary alone
can't talk to the daemon — the host's tailscaled socket needs to be
volume-mounted in docker-compose.yml.
"""
if cls._docker_hint_logged:
return
if Path("/.dockerenv").exists() and not Path("/var/run/tailscale/tailscaled.sock").exists():
logger.info(
"Running in Docker but Tailscale socket not found. "
"Mount /var/run/tailscale/tailscaled.sock to enable Tailscale."
"Running in Docker but /var/run/tailscale/tailscaled.sock is not mounted. "
"Add `- /var/run/tailscale/tailscaled.sock:/var/run/tailscale/tailscaled.sock` "
"to docker-compose.yml (under volumes:) and run Tailscale on the host to enable "
"Let's Encrypt certs for virtual printers."
)
cls._docker_hint_logged = True
@@ -157,6 +165,10 @@ class TailscaleService:
)
if returncode is None or returncode != 0:
# If the binary is present but the daemon socket is unreachable (e.g.
# Docker without the socket mount), log the actionable hint rather than
# just the opaque CLI stderr.
self._log_docker_socket_hint()
return TailscaleStatus(
available=False,
hostname="",