From dad842d2dad0d969add0a17068a4cb6a47dbc7d1 Mon Sep 17 00:00:00 2001
From: SebastianStork <sebastian.stork@pm.me>
Date: Mon, 24 Feb 2025 19:58:34 +0100
Subject: [PATCH] Add tailscale cert minimum remaining validity

---
 modules/system/tailscale.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/system/tailscale.nix b/modules/system/tailscale.nix
index 111178c..5c35326 100644
--- a/modules/system/tailscale.nix
+++ b/modules/system/tailscale.nix
@@ -51,7 +51,7 @@ in
       wantedBy = [ "multi-user.target" ];
       serviceConfig.Type = "oneshot";
       script = ''
-        ${lib.getExe pkgs.tailscale} cert ${cfg.subdomain}.${config.networking.domain}
+        ${lib.getExe pkgs.tailscale} cert --min-validity 120h ${cfg.subdomain}.${config.networking.domain}
         ${lib.getExe pkgs.tailscale} serve reset
         ${lib.getExe pkgs.tailscale} serve --bg ${cfg.serve}
       '';