[Moritz Mazetti (Radiergummi)]

Rewrites tslink's user documentation and publishes it as a website at https://matchory.github.io/tslink/.

What changes

• Voice. docs/STYLE.md replaces the Simplified Technical English rules with a direct, second-person voice that gives the reason next to the fact and names limits plainly. Every user page is rewritten in it: the tutorial, 7 guides, 7 reference pages, 4 explanation pages, examples/README.md, plus docs/README.md and parts of CONTRIBUTING.md.
• README. It now opens with why tslink exists, positioned as the Docker/Swarm counterpart of Tailscale's Kubernetes operator. It adds a diagram (docs/images/overview.svg), a comparison with the alternatives (sidecar, host Tailscale, tsnet), what tslink doesn't do, and an "independent project, not affiliated with Tailscale" line.
• Website. website/ is an Astro site adapted from cetacean's, built from docs/ under the /tslink base path. It has search, light and dark themes, Markdown copies of each page, llms.txt and a sitemap. It publishes only getting-started.md, guides/, reference/ and explanation/, so the style guide, specs and any local files stay off it.
• Link checks. website/scripts/check-links.ts (8 tests) checks the built site, its Markdown copies and the repository's Markdown as GitHub renders it, anchors included.
• CI. .github/workflows/pages.yml lints, type-checks, builds and checks links on every PR that touches docs, the site or any Markdown. It deploys only from main or on manual dispatch. GitHub Pages is already enabled with GitHub Actions as its source.
• Dependabot updates the site's dependencies (/website, npm).
• Clean-up. specs/ moves to docs/specs/. The two stub pages docs/credentials.md and docs/node-provisioning.md are removed, and the CHANGELOG's links to them now go to the real pages.
• Linters. markdownlint allows the README header's HTML, and the frontmatter title no longer counts as a second H1.

Docs that disagreed with the code or were wrong

• container-labels.md said several Services per container need v0.4.0. They shipped in v0.3.5.
• files-and-paths.md listed 4 status warnings. The code also writes node-name, service/<svc>, ports/<svc> and control/<svc>, which are now listed.
• https-certificates.md said the plain-HTTP certificate fix (feature/acme: only refresh certs for HTTPS serve entries tailscale/tailscale#21736) isn't in 1.104.1. It isn't in the now-bundled 1.104.4 either.
• examples/README.md linked "Tailscale Service" to a page that redirects to the Kubernetes operator's egress docs. It now goes to the Services docs.

The final review also found three statements the rewrite had made inaccurate; all are fixed:

• which errors end tslink's start retries;
• what --grant-all-permissions grants;
• when the Tailscale-App-Capabilities header can be trusted.

Verified

• go test ./... and golangci-lint run;
• markdownlint and actionlint;
• in website/: pnpm lint, fmt:check, check, test:links, build, check-links and check-links --source;
• the four sample pages and the home page at 375 px in light and dark.

Merging deploys the site.

🤖 Generated with Claude Code

https://claude.ai/code/session_01SYRvoVjhBse7GtgbaHgrFD