blob: f39fc275694e1e0d4316945e535d6a67a0f6d796 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
|
{
config,
pkgs,
lib,
...
}: let
cfg = config.collinux.services.networking.tailscale;
in
lib.mkIf cfg.enable {
services.tailscale = {
enable = true;
useRoutingFeatures = "both";
};
networking.firewall = {
checkReversePath = "loose";
trustedInterfaces = ["tailscale0"];
allowedUDPPorts = [config.services.tailscale.port];
};
environment.systemPackages = [pkgs.tailscale];
}
|
