erwin/nixos-config
1
0
Fork 0
Code Issues 1 Pull requests Projects 1 Releases Wiki Activity Actions

tailscale: Move to separate module

Browse source
This commit is contained in:
Erwin Boskma 2023-12-20 11:34:47 +01:00
parent e6f7adb423
commit 5f971a03d9
Signed by: erwin
SSH key fingerprint: SHA256:OCinH/khuGY1LA9RG8YLM8GNH6C1DDXBdy3SNE+I5Hw
3 changed files with 21 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
machines/loki/configuration.nix
View file

@ -64,6 +64,7 @@
};
podman.enable = true;
tablet.enable = false;
tailscale.enable = true;
sound = {
enable = true;
jack = true;
@ -131,7 +132,7 @@
};
firewall = {
trustedInterfaces = [ "lo" ];
trustedInterfaces = [ "lo" "tailscale0" ];
allowedTCPPorts = [
# NFS
111
@ -331,7 +332,6 @@
envfs.enable = false;
cpupower-gui.enable = true;
teamviewer.enable = true;
tailscale.enable = true;
sunshine = {
enable = true;
user = "erwin";

2
machines/mimir/configuration.nix
View file

@ -93,6 +93,7 @@
};
sound.enable = true;
systemd.enable = true;
tailscale.enable = true;
};
fileSystems = {
@ -349,7 +350,6 @@
cpupower-gui.enable = true;
flatpak.enable = true;
tailscale.enable = true;
teamviewer.enable = true;
udisks2 = {

18
modules/tailscale/default.nix Normal file
View file

@ -0,0 +1,18 @@
{ config, lib, ... }:
with lib;
let
cfg = config.eboskma.tailscale;
in
{
options.eboskma.tailscale = { enable = mkEnableOption "tailscale"; };
config = mkIf cfg.enable {
services.tailscale = {
enable = true;
};
systemd.services.tailscaled.environment = {
TS_DEBUG_FIREWALL_MODE = "auto";
};
};
}