diff --git a/apps/tailscale/1.54/.env.sample b/apps/tailscale/1.54/.env.sample
new file mode 100644
index 00000000..210603f5
--- /dev/null
+++ b/apps/tailscale/1.54/.env.sample
@@ -0,0 +1,13 @@
+CONTAINER_NAME="tailscale"
+TS_ACCEPT_DNS=false
+TS_AUTH_ONCE=false
+TS_AUTHKEY="tskey-auth-ab1CDE2CNTRL-0123456789abcdef"
+TS_DEST_IP=""
+TS_KUBE_SECRET=tailscale
+TS_HOSTNAME=my-tailscale-node
+TS_OUTBOUND_HTTP_PROXY_LISTEN=""
+TS_ROUTES="192.168.1.0/24,10.0.0.0/16"
+TS_SOCKET=/var/run/tailscale/tailscaled.sock
+TS_SOCKS5_SERVER=""
+TS_STATE_DIR=/var/lib/tailscale
+TS_USERSPACE=true
diff --git a/apps/tailscale/1.54/data.yml b/apps/tailscale/1.54/data.yml
new file mode 100644
index 00000000..93598bad
--- /dev/null
+++ b/apps/tailscale/1.54/data.yml
@@ -0,0 +1,86 @@
+additionalProperties:
+  formFields:
+    - default: tskey-auth-ab1CDE2CNTRL-0123456789abcdef
+      edit: true
+      envKey: TS_AUTHKEY
+      labelEn: Tailscale Auth Key
+      labelZh: Tailscale 认证密钥
+      required: true
+      type: text
+    - default: 192.168.1.0/24,10.0.0.0/16
+      edit: true
+      envKey: TS_ROUTES
+      labelEn: Advertise Subnet Routes
+      labelZh: 广播子网路由
+      required: true
+      type: text
+    - default: 'false'
+      edit: true
+      envKey: TS_ACCEPT_DNS
+      labelEn: Accept DNS configuration (true/false)
+      labelZh: 是否接受 DNS 配置 (true/false)
+      required: false
+      type: text
+    - default: 'false'
+      edit: true
+      envKey: TS_AUTH_ONCE
+      labelEn: Attempt to log in once (true/false)
+      labelZh: 尝试仅登录一次 (true/false)
+      required: false
+      type: text
+    - default: ''
+      edit: true
+      envKey: TS_DEST_IP
+      labelEn: Destination IP
+      labelZh: 目标 IP
+      required: false
+      type: text
+    - default: tailscale
+      edit: true
+      envKey: TS_KUBE_SECRET
+      labelEn: Kubernetes Secret Name
+      labelZh: Kubernetes 密钥名称
+      required: false
+      type: text
+    - default: my-tailscale-node
+      edit: true
+      envKey: TS_HOSTNAME
+      labelEn: Node Hostname
+      labelZh: 节点主机名
+      required: false
+      type: text
+    - default: ''
+      edit: true
+      envKey: TS_OUTBOUND_HTTP_PROXY_LISTEN
+      labelEn: HTTP Proxy Address and Port (127.0.0.1:1081)
+      labelZh: HTTP代理地址和端口 (127.0.0.1:1081)
+      required: false
+      type: text
+    - default: /var/run/tailscale/tailscaled.sock
+      edit: true
+      envKey: TS_SOCKET
+      labelEn: Tailscale Socket Path
+      labelZh: Tailscale Socket 路径
+      required: false
+      type: text
+    - default: ''
+      edit: true
+      envKey: TS_SOCKS5_SERVER
+      labelEn: SOCKS5 Proxy Address and Port (127.0.0.1:1080)
+      labelZh: SOCKS5代理地址和端口 (127.0.0.1:1080)
+      required: false
+      type: text
+    - default: /var/lib/tailscale
+      edit: true
+      envKey: TS_STATE_DIR
+      labelEn: Tailscale State Directory
+      labelZh: Tailscale 状态目录
+      required: false
+      type: text
+    - default: 'true'
+      edit: true
+      envKey: TS_USERSPACE
+      labelEn: Enable Userspace Networking (true/false)
+      labelZh: 启用用户空间网络 (true/false)
+      required: false
+      type: text
diff --git a/apps/tailscale/1.54/docker-compose.yml b/apps/tailscale/1.54/docker-compose.yml
new file mode 100644
index 00000000..bfe9d73a
--- /dev/null
+++ b/apps/tailscale/1.54/docker-compose.yml
@@ -0,0 +1,28 @@
+version: '3'
+services:
+  tailscale:
+    container_name: ${CONTAINER_NAME}
+    restart: always
+    network_mode: host
+    volumes:
+      - /var/lib:/var/lib
+      - /dev/net/tun:/dev/net/tun
+    cap_add:
+      - NET_ADMIN
+      - NET_RAW
+    environment:
+      - TS_ACCEPT_DNS=${TS_ACCEPT_DNS}
+      - TS_AUTH_ONCE=${TS_AUTH_ONCE}
+      - TS_AUTHKEY=${TS_AUTHKEY}
+      - TS_DEST_IP=${TS_DEST_IP}
+      - TS_KUBE_SECRET=${TS_KUBE_SECRET}
+      - TS_HOSTNAME=${TS_HOSTNAME}
+      - TS_OUTBOUND_HTTP_PROXY_LISTEN=${TS_OUTBOUND_HTTP_PROXY_LISTEN}
+      - TS_ROUTES=${TS_ROUTES}
+      - TS_SOCKET=${TS_SOCKET}
+      - TS_SOCKS5_SERVER=${TS_SOCKS5_SERVER}
+      - TS_STATE_DIR=${TS_STATE_DIR}
+      - TS_USERSPACE=${TS_USERSPACE}
+    image: tailscale/tailscale:v1.54
+    labels:  
+      createdBy: "Apps"
diff --git a/apps/tailscale/README.md b/apps/tailscale/README.md
new file mode 100644
index 00000000..ee6fcf5d
--- /dev/null
+++ b/apps/tailscale/README.md
@@ -0,0 +1,88 @@
+# Tailscale
+
+https://tailscale.com
+
+Private WireGuard® networks made easy
+
+## Overview
+
+This repository contains the majority of Tailscale's open source code.
+Notably, it includes the `tailscaled` daemon and
+the `tailscale` CLI tool. The `tailscaled` daemon runs on Linux, Windows,
+[macOS](https://tailscale.com/kb/1065/macos-variants/), and to varying degrees
+on FreeBSD and OpenBSD. The Tailscale iOS and Android apps use this repo's
+code, but this repo doesn't contain the mobile GUI code.
+
+Other [Tailscale repos](https://github.com/orgs/tailscale/repositories) of note:
+
+* the Android app is at https://github.com/tailscale/tailscale-android
+* the Synology package is at https://github.com/tailscale/tailscale-synology
+* the QNAP package is at https://github.com/tailscale/tailscale-qpkg
+* the Chocolatey packaging is at https://github.com/tailscale/tailscale-chocolatey
+
+For background on which parts of Tailscale are open source and why,
+see [https://tailscale.com/opensource/](https://tailscale.com/opensource/).
+
+## Using
+
+We serve packages for a variety of distros and platforms at
+[https://pkgs.tailscale.com](https://pkgs.tailscale.com/).
+
+## Other clients
+
+The [macOS, iOS, and Windows clients](https://tailscale.com/download)
+use the code in this repository but additionally include small GUI
+wrappers. The GUI wrappers on non-open source platforms are themselves
+not open source.
+
+## Building
+
+We always require the latest Go release, currently Go 1.21. (While we build
+releases with our [Go fork](https://github.com/tailscale/go/), its use is not
+required.)
+
+```
+go install tailscale.com/cmd/tailscale{,d}
+```
+
+If you're packaging Tailscale for distribution, use `build_dist.sh`
+instead, to burn commit IDs and version info into the binaries:
+
+```
+./build_dist.sh tailscale.com/cmd/tailscale
+./build_dist.sh tailscale.com/cmd/tailscaled
+```
+
+If your distro has conventions that preclude the use of
+`build_dist.sh`, please do the equivalent of what it does in your
+distro's way, so that bug reports contain useful version information.
+
+## Bugs
+
+Please file any issues about this code or the hosted service on
+[the issue tracker](https://github.com/tailscale/tailscale/issues).
+
+## Contributing
+
+PRs welcome! But please file bugs. Commit messages should [reference
+bugs](https://docs.github.com/en/github/writing-on-github/autolinked-references-and-urls).
+
+We require [Developer Certificate of
+Origin](https://en.wikipedia.org/wiki/Developer_Certificate_of_Origin)
+`Signed-off-by` lines in commits.
+
+See `git log` for our commit message style. It's basically the same as
+[Go's style](https://github.com/golang/go/wiki/CommitMessage).
+
+## About Us
+
+[Tailscale](https://tailscale.com/) is primarily developed by the
+people at https://github.com/orgs/tailscale/people. For other contributors,
+see:
+
+* https://github.com/tailscale/tailscale/graphs/contributors
+* https://github.com/tailscale/tailscale-android/graphs/contributors
+
+## Legal
+
+WireGuard is a registered trademark of Jason A. Donenfeld.
\ No newline at end of file
diff --git a/apps/tailscale/data.yml b/apps/tailscale/data.yml
new file mode 100644
index 00000000..3bf56dbd
--- /dev/null
+++ b/apps/tailscale/data.yml
@@ -0,0 +1,20 @@
+name: Tailscale
+tags:
+    - 工具
+title: 使用 WireGuard 和 2FA 的最简单、最安全的方式
+type: 工具
+description: 使用 WireGuard 和 2FA 的最简单、最安全的方式
+additionalProperties:
+    key: tailscale
+    name: Tailscale
+    tags:
+        - Tool
+    shortDescZh: 使用 WireGuard 和 2FA 的最简单、最安全的方式
+    shortDescEn: The easiest, most secure way to use WireGuard and 2FA
+    type: tool
+    crossVersionUpdate: true
+    limit: 0
+    recommend: 0
+    website: https://tailscale.com
+    github: https://github.com/tailscale/tailscale
+    document: https://tailscale.com/kb/1017/install
diff --git a/apps/tailscale/latest/.env.sample b/apps/tailscale/latest/.env.sample
new file mode 100644
index 00000000..210603f5
--- /dev/null
+++ b/apps/tailscale/latest/.env.sample
@@ -0,0 +1,13 @@
+CONTAINER_NAME="tailscale"
+TS_ACCEPT_DNS=false
+TS_AUTH_ONCE=false
+TS_AUTHKEY="tskey-auth-ab1CDE2CNTRL-0123456789abcdef"
+TS_DEST_IP=""
+TS_KUBE_SECRET=tailscale
+TS_HOSTNAME=my-tailscale-node
+TS_OUTBOUND_HTTP_PROXY_LISTEN=""
+TS_ROUTES="192.168.1.0/24,10.0.0.0/16"
+TS_SOCKET=/var/run/tailscale/tailscaled.sock
+TS_SOCKS5_SERVER=""
+TS_STATE_DIR=/var/lib/tailscale
+TS_USERSPACE=true
diff --git a/apps/tailscale/latest/data.yml b/apps/tailscale/latest/data.yml
new file mode 100644
index 00000000..93598bad
--- /dev/null
+++ b/apps/tailscale/latest/data.yml
@@ -0,0 +1,86 @@
+additionalProperties:
+  formFields:
+    - default: tskey-auth-ab1CDE2CNTRL-0123456789abcdef
+      edit: true
+      envKey: TS_AUTHKEY
+      labelEn: Tailscale Auth Key
+      labelZh: Tailscale 认证密钥
+      required: true
+      type: text
+    - default: 192.168.1.0/24,10.0.0.0/16
+      edit: true
+      envKey: TS_ROUTES
+      labelEn: Advertise Subnet Routes
+      labelZh: 广播子网路由
+      required: true
+      type: text
+    - default: 'false'
+      edit: true
+      envKey: TS_ACCEPT_DNS
+      labelEn: Accept DNS configuration (true/false)
+      labelZh: 是否接受 DNS 配置 (true/false)
+      required: false
+      type: text
+    - default: 'false'
+      edit: true
+      envKey: TS_AUTH_ONCE
+      labelEn: Attempt to log in once (true/false)
+      labelZh: 尝试仅登录一次 (true/false)
+      required: false
+      type: text
+    - default: ''
+      edit: true
+      envKey: TS_DEST_IP
+      labelEn: Destination IP
+      labelZh: 目标 IP
+      required: false
+      type: text
+    - default: tailscale
+      edit: true
+      envKey: TS_KUBE_SECRET
+      labelEn: Kubernetes Secret Name
+      labelZh: Kubernetes 密钥名称
+      required: false
+      type: text
+    - default: my-tailscale-node
+      edit: true
+      envKey: TS_HOSTNAME
+      labelEn: Node Hostname
+      labelZh: 节点主机名
+      required: false
+      type: text
+    - default: ''
+      edit: true
+      envKey: TS_OUTBOUND_HTTP_PROXY_LISTEN
+      labelEn: HTTP Proxy Address and Port (127.0.0.1:1081)
+      labelZh: HTTP代理地址和端口 (127.0.0.1:1081)
+      required: false
+      type: text
+    - default: /var/run/tailscale/tailscaled.sock
+      edit: true
+      envKey: TS_SOCKET
+      labelEn: Tailscale Socket Path
+      labelZh: Tailscale Socket 路径
+      required: false
+      type: text
+    - default: ''
+      edit: true
+      envKey: TS_SOCKS5_SERVER
+      labelEn: SOCKS5 Proxy Address and Port (127.0.0.1:1080)
+      labelZh: SOCKS5代理地址和端口 (127.0.0.1:1080)
+      required: false
+      type: text
+    - default: /var/lib/tailscale
+      edit: true
+      envKey: TS_STATE_DIR
+      labelEn: Tailscale State Directory
+      labelZh: Tailscale 状态目录
+      required: false
+      type: text
+    - default: 'true'
+      edit: true
+      envKey: TS_USERSPACE
+      labelEn: Enable Userspace Networking (true/false)
+      labelZh: 启用用户空间网络 (true/false)
+      required: false
+      type: text
diff --git a/apps/tailscale/latest/docker-compose.yml b/apps/tailscale/latest/docker-compose.yml
new file mode 100644
index 00000000..441ced9f
--- /dev/null
+++ b/apps/tailscale/latest/docker-compose.yml
@@ -0,0 +1,28 @@
+version: '3'
+services:
+  tailscale:
+    container_name: ${CONTAINER_NAME}
+    restart: always
+    network_mode: host
+    volumes:
+      - /var/lib:/var/lib
+      - /dev/net/tun:/dev/net/tun
+    cap_add:
+      - NET_ADMIN
+      - NET_RAW
+    environment:
+      - TS_ACCEPT_DNS=${TS_ACCEPT_DNS}
+      - TS_AUTH_ONCE=${TS_AUTH_ONCE}
+      - TS_AUTHKEY=${TS_AUTHKEY}
+      - TS_DEST_IP=${TS_DEST_IP}
+      - TS_KUBE_SECRET=${TS_KUBE_SECRET}
+      - TS_HOSTNAME=${TS_HOSTNAME}
+      - TS_OUTBOUND_HTTP_PROXY_LISTEN=${TS_OUTBOUND_HTTP_PROXY_LISTEN}
+      - TS_ROUTES=${TS_ROUTES}
+      - TS_SOCKET=${TS_SOCKET}
+      - TS_SOCKS5_SERVER=${TS_SOCKS5_SERVER}
+      - TS_STATE_DIR=${TS_STATE_DIR}
+      - TS_USERSPACE=${TS_USERSPACE}
+    image: tailscale/tailscale:latest
+    labels:  
+      createdBy: "Apps"
diff --git a/apps/tailscale/logo.png b/apps/tailscale/logo.png
new file mode 100644
index 00000000..bde213ba
Binary files /dev/null and b/apps/tailscale/logo.png differ