Production Deployment

Production Deployment with Tailscale

For production, a docker-compose.override.yml-prod is included that adds a tsrp (Tailscale Reverse Proxy) sidecar and removes the public port mapping. Mission Control becomes accessible only over your Tailscale network.

ln -s docker-compose.override.yml-prod docker-compose.override.yml

Add the following to your .env:

HOSTNAME=praktor              # Tailscale machine name
TS_AUTHKEY=tskey-auth-...     # Tailscale auth key (https://login.tailscale.com/admin/settings/keys)

Then start as usual — the override is picked up automatically:

docker compose up -d

Mission Control will be available at https://praktor.<your-tailnet>.ts.net. The tsrp container stores its Tailscale state in ./state/.