[Unit]
Description=Tailscale node agent
Documentation=https://tailscale.com/kb/
Wants=network-pre.target
After=network-pre.target NetworkManager.service systemd-resolved.service

[Service]
ExecStartPre=@tailscale@/bin/tailscaled --cleanup
ExecStart=@tailscale@/bin/tailscaled --state=/var/lib/tailscale/tailscaled.state --socket=/run/tailscale/tailscaled.sock --tun=userspace-networking
ExecStopPost=@tailscale@/bin/tailscaled --cleanup
AmbientCapabilities=CAP_NET_ADMIN
Restart=on-failure
User=root
BindPaths=/dev/net
BindPaths=/etc/resolv.conf
BindPaths=/run/tailscale
RuntimeDirectory=tailscale
RuntimeDirectoryMode=0755
StateDirectory=tailscale
StateDirectoryMode=0700
CacheDirectory=tailscale
CacheDirectoryMode=0750
Type=notify

[Install]
WantedBy=multi-user.target