blob: 7b6cf086e90e4d76ae2d8462e77fe4c27d501d50 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
|
{
config,
pkgs,
lib,
...
}: let
cfg = config.collinux.services.networking.tailscale;
in
lib.mkIf cfg.enable {
services.tailscale = {
enable = true;
useRoutingFeatures = "both";
};
networking.firewall = {
checkReversePath = "loose";
trustedInterfaces = ["tailscale0"];
allowedUDPPorts = [config.services.tailscale.port];
};
environment.systemPackages = [pkgs.tailscale];
}
|