mirror of
https://github.com/SebastianStork/nixos-config.git
synced 2026-01-21 15:11:34 +01:00
32 lines
900 B
Nix
32 lines
900 B
Nix
{ config, lib, ... }:
|
|
let
|
|
cfg = config.custom.services.tailscale;
|
|
in
|
|
{
|
|
options.custom.services.tailscale = {
|
|
enable = lib.mkEnableOption "";
|
|
domain = lib.mkOption {
|
|
type = lib.types.nonEmptyStr;
|
|
default = "stork-atlas.ts.net";
|
|
};
|
|
ssh.enable = lib.mkEnableOption "";
|
|
exitNode.enable = lib.mkEnableOption "";
|
|
};
|
|
|
|
config = lib.mkIf cfg.enable {
|
|
sops.secrets."tailscale-auth-key" = { };
|
|
|
|
services.tailscale = {
|
|
enable = true;
|
|
authKeyFile = config.sops.secrets."tailscale-auth-key".path;
|
|
openFirewall = true;
|
|
useRoutingFeatures =
|
|
if (cfg.exitNode.enable || (cfg.serve.target != null)) then "server" else "client";
|
|
extraUpFlags = [ "--reset=true" ];
|
|
extraSetFlags = [
|
|
"--ssh=${lib.boolToString cfg.ssh.enable}"
|
|
"--advertise-exit-node=${lib.boolToString cfg.exitNode.enable}"
|
|
];
|
|
};
|
|
};
|
|
}
|