Add webfinger for tailscale

stacks/tailscale/docker-compose.yaml

@@ -0,0 +1,38 @@
+services:
+  webfinger:
+    image: nginx:stable-alpine3.23
+    container_name: webfinger
+    restart: unless-stopped
+
+    read_only: true
+    tmpfs:
+      - /var/cache/nginx
+      - /var/run
+      - /tmp
+
+    security_opt:
+      - no-new-privileges:true
+
+    cap_drop:
+      - ALL
+
+    volumes:
+      - ./nginx.conf:/etc/nginx/conf.d/default.conf:ro
+
+    labels:
+      - "traefik.enable=true"
+
+      - "traefik.http.routers.webfinger.rule=Host(`tailscale.ulfrx.dev`) && Path(`/.well-known/webfinger`)"
+      - "traefik.http.routers.webfinger.entrypoints=websecure"
+      - "traefik.http.routers.webfinger.tls=true"
+      - "traefik.http.routers.webfinger.tls.certresolver=letsencrypt"
+      - "traefik.http.routers.webfinger.priority=1000"
+
+      - "traefik.http.services.webfinger.loadbalancer.server.port=8080"
+
+    networks:
+      - proxy
+
+networks:
+  proxy:
+    external: true