name: golink services: server: image: ghcr.io/tailscale/golink:main user: root environment: - TS_AUTHKEY={{ lookup('community.general.onepassword', 'GoLink', vault='Dotfiles', field='TS_AUTHKEY') }} volumes: - {{ golink_data_dir }}:/home/nonroot restart: "unless-stopped"