blob: f60e48e54333ba3c7beeb96896086598646c53c6 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
|
{
config,
pkgs,
lib,
...
}: let
cfg = config.collinux.services.networking.tailscale;
in
lib.mkIf cfg.enable {
services.tailscale = {
enable = true;
useRoutingFeatures = "both";
extraSetFlags = ["--ssh=true"];
};
networking.firewall = {
checkReversePath = "loose";
trustedInterfaces = ["tailscale0"];
allowedUDPPorts = [config.services.tailscale.port];
};
environment.systemPackages = [pkgs.tailscale];
}
|
