From 0456eb979a9f25677ee77f7685b0fd853004fefb Mon Sep 17 00:00:00 2001
From: SebastianStork <sebastian.stork@pm.me>
Date: Tue, 13 May 2025 09:33:15 +0200
Subject: [PATCH] Fix tailscale funnel

---
 modules/system/tailscale/default.nix | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/modules/system/tailscale/default.nix b/modules/system/tailscale/default.nix
index e3e2874..7235959 100644
--- a/modules/system/tailscale/default.nix
+++ b/modules/system/tailscale/default.nix
@@ -54,9 +54,14 @@ in
           ];
           wants = [ "tailscaled.service" ];
           wantedBy = [ "multi-user.target" ];
-          serviceConfig.Type = "oneshot";
-          preStart = "${lib.getExe pkgs.tailscale} cert --min-validity 120h ${cfg.subdomain}.${config.networking.domain}";
-          script = "${lib.getExe pkgs.tailscale} ${mode} ${cfg.serve.target}";
+          serviceConfig = {
+            Type = "oneshot";
+            RemainAfterExit = true;
+            ExecStartPre = "${lib.getExe pkgs.tailscale} cert --min-validity 120h ${cfg.subdomain}.${config.networking.domain}";
+            ExecStart = "${lib.getExe pkgs.tailscale} ${mode} --bg ${cfg.serve.target}";
+            ExecStop = "${lib.getExe pkgs.tailscale} ${mode} reset";
+            Restart = "on-failure";
+          };
         };
 
         tailscaled-set.after = [ "tailscaled-autoconnect.service" ];