Tailscale + Pihole completely containerized with docker compose

docker-compose.yml

services:
  tailscale-pihole:
    image: tailscale/tailscale
    container_name: tailscale
    hostname: tailscale-pihole
    restart: unless-stopped
    environment:
      - TS_STATE_DIR=/var/lib/tailscale
      - TS_AUTHKEY=tskey-auth-
    cap_add:
      - net_admin
      - sys_module
    volumes:
      - tailscale-data-pihole:/var/lib/tailscale
      - /dev/net/tun:/dev/net/tun
  pihole:
    image: pihole/pihole:latest
    container_name: pihole
    restart: unless-stopped
    environment:
      TZ: Europe/Berlin
      WEBPASSWORD: "Password"
      DNSMASQ_LISTENING: all
    network_mode: service:tailscale-pihole
    volumes:
      - pihole-data:/etc/pihole
      - ./custom_data/joined_customrecords.dnsmasq:/etc/dnsmasq.d/00-additional.conf
volumes:
  tailscale-data-pihole:
    driver: local
  pihole-data:
    driver: local