diff options
| author | Leander Scherer <leander@schererleander.de> | 2026-06-04 01:07:20 +0200 |
|---|---|---|
| committer | Leander Scherer <leander@schererleander.de> | 2026-06-11 15:21:33 +0200 |
| commit | d82d3be2d8f65d2004d5a20f92bf87070bfefacd (patch) | |
| tree | bb5a825d5c99ddd11c6fa1a9273ec595c3a97515 /modules | |
| parent | 2e38855e6b14e26a43456ca875f0ca21e1ada26a (diff) | |
feat(tailscale): setup tailscale
Diffstat (limited to 'modules')
| -rw-r--r-- | modules/hosts/adam/flake-parts.nix | 2 | ||||
| -rw-r--r-- | modules/system/tailscale.nix | 14 |
2 files changed, 15 insertions, 1 deletions
diff --git a/modules/hosts/adam/flake-parts.nix b/modules/hosts/adam/flake-parts.nix index 7f8de0c..f76dce2 100644 --- a/modules/hosts/adam/flake-parts.nix +++ b/modules/hosts/adam/flake-parts.nix @@ -19,7 +19,7 @@ wifi mullvad-vpn steam - sunshine + tailscale wooting ]; }; diff --git a/modules/system/tailscale.nix b/modules/system/tailscale.nix new file mode 100644 index 0000000..994c7a8 --- /dev/null +++ b/modules/system/tailscale.nix @@ -0,0 +1,14 @@ +{ + flake.modules.nixos.tailscale = { config, ... }: { + services.tailscale.enable = true; + networking.nftables.enable = true; + networking.firewall = { + enable = true; + trustedInterfaces = [ config.services.tailscale.interfaceName ]; + allowedUDPPorts = [ config.services.tailscale.port ]; + }; + systemd.services.tailscaled.serviceConfig.Environment = [ + "TS_DEBUG_FIREWALL_MODE=nftables" + ]; + }; +} |