cilly/flakes
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

system/tailscale: open port 123 on headless
Some checks are pending
CI / Build linux-lava for x86_64-linux (push) Waiting to run
Details

Browse source
This commit is contained in:
Cilly Leang 2026-06-10 15:05:05 +10:00
parent ea17ef30c6
commit 75f9cc9d2b
Signed by: cilly
GPG key ID: 6500251E087653C9
1 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
modules/system/tailscale.nix
View file

@ -1,7 +1,9 @@
{ config, ... }: { { config, lib, ... }: {
age.secrets.tailscale_auth.file = ../../secrets/tailscale_auth.age; age.secrets.tailscale_auth.file = ../../secrets/tailscale_auth.age;
me.binds."/var/lib/tailscale" = "tailscale"; me.binds."/var/lib/tailscale" = "tailscale";
networking.firewall.trustedInterfaces = [ "tailscale0" ]; networking.firewall.trustedInterfaces = [ "tailscale0" ];
networking.firewall.allowedUdpPorts = lib.mkIf config.me.environment == "headless" [ 123 ];
services.tailscale = { services.tailscale = {
enable = true; enable = true;
authKeyFile = config.age.secrets.tailscale_auth.path; authKeyFile = config.age.secrets.tailscale_auth.path;