diff options
Diffstat (limited to 'modules')
| -rw-r--r-- | modules/hosts/adam/flake-parts.nix | 2 | ||||
| -rw-r--r-- | modules/system/tailscale.nix | 14 |
2 files changed, 15 insertions, 1 deletions
diff --git a/modules/hosts/adam/flake-parts.nix b/modules/hosts/adam/flake-parts.nix index 7f8de0c..f76dce2 100644 --- a/modules/hosts/adam/flake-parts.nix +++ b/modules/hosts/adam/flake-parts.nix @@ -19,7 +19,7 @@ wifi mullvad-vpn steam - sunshine + tailscale wooting ]; }; diff --git a/modules/system/tailscale.nix b/modules/system/tailscale.nix new file mode 100644 index 0000000..994c7a8 --- /dev/null +++ b/modules/system/tailscale.nix @@ -0,0 +1,14 @@ +{ + flake.modules.nixos.tailscale = { config, ... }: { + services.tailscale.enable = true; + networking.nftables.enable = true; + networking.firewall = { + enable = true; + trustedInterfaces = [ config.services.tailscale.interfaceName ]; + allowedUDPPorts = [ config.services.tailscale.port ]; + }; + systemd.services.tailscaled.serviceConfig.Environment = [ + "TS_DEBUG_FIREWALL_MODE=nftables" + ]; + }; +} |