diff options
| author | Silas Schöffel <sils@sils.li> | 2026-06-23 02:56:12 +0200 |
|---|---|---|
| committer | Silas Schöffel <sils@sils.li> | 2026-06-23 02:56:12 +0200 |
| commit | 0ee989b8473bcdf3f7e4c2bb68217cbaab25cdd1 (patch) | |
| tree | 978f54918d4cecb5af209f1e0655fc227c6d9987 /modules/nixos/sils/tailscale.nix | |
| parent | user: rename to jaki (diff) | |
| download | nix-config-0ee989b8473bcdf3f7e4c2bb68217cbaab25cdd1.zip | |
treewide: rename paths to jaki
Diffstat (limited to 'modules/nixos/sils/tailscale.nix')
| -rw-r--r-- | modules/nixos/sils/tailscale.nix | 52 |
1 files changed, 0 insertions, 52 deletions
diff --git a/modules/nixos/sils/tailscale.nix b/modules/nixos/sils/tailscale.nix deleted file mode 100644 index e1f49a4..0000000 --- a/modules/nixos/sils/tailscale.nix +++ /dev/null @@ -1,52 +0,0 @@ -{ - config, - lib, - ... -}: let - cfg = config.sils.tailscale; -in { - options.sils.tailscale = { - enable = lib.mkEnableOption "Tailscale"; - openFirewall = true; - role = lib.mkOption { - type = lib.types.enum [ - "client" - "server" - ]; - }; - }; - config = lib.mkIf cfg.enable { - services.tailscale = { - enable = true; - authKeyFile = config.age.secrets.tailscale.path; - useRoutingFeatures = cfg.role; - extraDaemonFlags = [ - "--no-logs-no-support" - ]; - extraSetFlags = [ - "--accept-routes" - ]; - }; - networking.firewall = { - trustedInterfaces = ["tailscale0"]; - allowedUDPPorts = [config.services.tailscale.port]; - checkReversePath = "loose"; - }; - systemd = { - services.tailscaled.serviceConfig.Environment = [ - "TS_DEBUG_FIREWALL_MODE=nftables" - ]; - network.wait-online.enable = false; - }; - boot.initrd.systemd.network.wait-online.enable = false; - - environment.persistence."/srv".directories = [ - { - directory = "/var/lib/tailscale"; - user = "root"; - group = "root"; - mode = "0700"; - } - ]; - }; -} |
