SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-01-21 19:51:34 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Enable tailscale

Browse source
This commit is contained in:
SebastianStork 2024-06-19 22:41:56 +02:00
parent 5fac577437
commit 433ab8d024
6 changed files with 41 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

1
modules/system/default.nix
View file

@ -15,5 +15,6 @@
./nix-helper.nix
./auto-gc.nix
./night-light.nix
./tailscale.nix
];
}

29
modules/system/tailscale.nix Normal file
View file

@ -0,0 +1,29 @@
{ config, lib, ... }:
let
cfg = config.myConfig.tailscale;
in
{
options.myConfig.tailscale = {
enable = lib.mkEnableOption "";
ssh.enable = lib.mkEnableOption "";
exitNode.enable = lib.mkEnableOption "";
};
config = lib.mkIf cfg.enable {
sops.secrets.tailscale-auth-key = { };
services.tailscale = {
enable = true;
authKeyFile = config.sops.secrets.tailscale-auth-key.path;
openFirewall = true;
permitCertUid = "root";
useRoutingFeatures = if cfg.exitNode.enable then "server" else "client";
extraUpFlags = [
(lib.mkIf cfg.ssh.enable "--ssh")
(lib.mkIf cfg.exitNode.enable "--advertise-exit-node")
];
};
};
}