refactoring to more granular flakes and modules

2025-10-21 22:12:23 -05:00 · 2025-10-21 22:12:23 -05:00 · 50825c9b84
commit 50825c9b84
parent 6570da6f33
52 changed files with 2501 additions and 9 deletions
--- a/flakes/common/nix_modules/tailnet.nix
+++ b/flakes/common/nix_modules/tailnet.nix
@ -0,0 +1,22 @@
+{
+  config,
+  pkgs,
+  ...
+}:
+{
+  environment.systemPackages = with pkgs; [ tailscale ];
+  services.tailscale = {
+    enable = true;
+    openFirewall = true;
+    useRoutingFeatures = "client";
+    authKeyFile = config.age.secrets.headscale_auth.path;
+    extraUpFlags = [
+      "--login-server=https://headscale.joshuabell.xyz"
+    ];
+    extraDaemonFlags = [
+      "--no-logs-no-support"
+    ];
+  };
+  networking.firewall.trustedInterfaces = [ config.services.tailscale.interfaceName ];
+  networking.firewall.checkReversePath = "loose";
+}