# Written by an LLM (Claude Code) — review before trusting on a machine
# other than the one this was diagnosed on. See README.md.
#
# Ensures Docker's bridge traffic bypasses Tailscale's exit-node route
# (see docker-tailscale-route.sh for the full explanation of why this is
# needed). Triggered on a schedule by the companion
# docker-tailscale-route.timer unit rather than a network event: on
# Linux, tailscale0 is a tun device created directly by tailscaled, not
# through a NetworkManager connection profile, so NetworkManager never
# fires dispatcher events for it going up/down.

[Unit]
Description=Ensure Docker bridge traffic bypasses Tailscale's exit-node route
After=network.target

[Service]
Type=oneshot
ExecStart=/usr/local/sbin/docker-tailscale-route.sh