From d82d3be2d8f65d2004d5a20f92bf87070bfefacd Mon Sep 17 00:00:00 2001
From: Leander Scherer <leander@schererleander.de>
Date: Thu, 4 Jun 2026 01:07:20 +0200
Subject: feat(tailscale): setup tailscale

---
 modules/system/tailscale.nix | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 modules/system/tailscale.nix

(limited to 'modules/system')

diff --git a/modules/system/tailscale.nix b/modules/system/tailscale.nix
new file mode 100644
index 0000000..994c7a8
--- /dev/null
+++ b/modules/system/tailscale.nix
@@ -0,0 +1,14 @@
+{
+  flake.modules.nixos.tailscale = { config, ... }: {
+    services.tailscale.enable = true;
+    networking.nftables.enable = true;
+    networking.firewall = {
+      enable = true;
+      trustedInterfaces = [ config.services.tailscale.interfaceName ];
+      allowedUDPPorts = [ config.services.tailscale.port ];
+    };
+    systemd.services.tailscaled.serviceConfig.Environment = [
+      "TS_DEBUG_FIREWALL_MODE=nftables"
+    ];
+  };
+}
-- 
cgit v1.3.1