feat(tailscale): setup tailscale
This commit is contained in:
parent
7a59ec63a1
commit
25ec3e22b2
2 changed files with 12 additions and 0 deletions
|
|
@ -6,6 +6,7 @@ in
|
||||||
imports = [
|
imports = [
|
||||||
./hardware-configuration.nix
|
./hardware-configuration.nix
|
||||||
./openssh.nix
|
./openssh.nix
|
||||||
|
./tailscale.nix
|
||||||
./firewall.nix
|
./firewall.nix
|
||||||
./fail2ban.nix
|
./fail2ban.nix
|
||||||
./borgbackup.nix
|
./borgbackup.nix
|
||||||
|
|
|
||||||
11
tailscale.nix
Normal file
11
tailscale.nix
Normal file
|
|
@ -0,0 +1,11 @@
|
||||||
|
{
|
||||||
|
networking.nameservers = [ "100.100.100.100" "1.1.1.1" "8.8.8.8" ];
|
||||||
|
networking.search = [ "hummingbird-stork.ts.net" ];
|
||||||
|
services.tailscale = {
|
||||||
|
enable = true;
|
||||||
|
useRoutingFeatures = "both";
|
||||||
|
extraUpFlags = [ "--ssh" ];
|
||||||
|
};
|
||||||
|
# Tell the firewall to implicitly trust packets routed over Tailscale:
|
||||||
|
networking.firewall.trustedInterfaces = [ "tailscale0" ];
|
||||||
|
}
|
||||||
Loading…
Add table
Add a link
Reference in a new issue