summaryrefslogtreecommitdiff
path: root/modules/core/networking/vpn
diff options
context:
space:
mode:
authorFuwn <[email protected]>2024-09-22 14:48:17 -0700
committerFuwn <[email protected]>2024-09-22 14:48:17 -0700
commitea494e9d76a76363ac9b652dc758f3daf1d499b6 (patch)
tree5b001e6a60f7e013e1cd6e04ade31117236cd185 /modules/core/networking/vpn
parenttailscale: authenticate on all systems (diff)
downloadnixos-config-ea494e9d76a76363ac9b652dc758f3daf1d499b6.tar.xz
nixos-config-ea494e9d76a76363ac9b652dc758f3daf1d499b6.zip
modules: move desktop networking to desktop
Diffstat (limited to 'modules/core/networking/vpn')
-rw-r--r--modules/core/networking/vpn/default.nix6
-rw-r--r--modules/core/networking/vpn/pia.nix10
-rw-r--r--modules/core/networking/vpn/tailscale.nix35
3 files changed, 0 insertions, 51 deletions
diff --git a/modules/core/networking/vpn/default.nix b/modules/core/networking/vpn/default.nix
deleted file mode 100644
index 92a11b0..0000000
--- a/modules/core/networking/vpn/default.nix
+++ /dev/null
@@ -1,6 +0,0 @@
-{
- imports = [
- ./pia.nix
- ./tailscale.nix
- ];
-}
diff --git a/modules/core/networking/vpn/pia.nix b/modules/core/networking/vpn/pia.nix
deleted file mode 100644
index d52dbf8..0000000
--- a/modules/core/networking/vpn/pia.nix
+++ /dev/null
@@ -1,10 +0,0 @@
-{ secrets, ... }:
-{
- services.pia = {
- enable = true;
-
- authUserPass = {
- inherit (secrets.pia) username password;
- };
- };
-}
diff --git a/modules/core/networking/vpn/tailscale.nix b/modules/core/networking/vpn/tailscale.nix
deleted file mode 100644
index 0228915..0000000
--- a/modules/core/networking/vpn/tailscale.nix
+++ /dev/null
@@ -1,35 +0,0 @@
-{
- config,
- lib,
- pkgs,
- ...
-}:
-{
- networking.firewall.trustedInterfaces = [ "${config.services.tailscale.interfaceName}" ];
-
- # <https://tailscale.com/kb/1019/subnets/?tab=linux#step-1-install-the-tailscale-client>
- boot.kernel.sysctl = {
- "net.ipv4.ip_forward" = true;
- "net.ipv6.conf.all.forwarding" = true;
- };
-
- services = {
- tailscale = {
- enable = true;
- useRoutingFeatures = "both";
- authKeyFile = config.sops.secrets.tailscale_authentication_key.path;
- };
-
- networkd-dispatcher = {
- enable = true;
-
- rules."50-tailscale" = {
- onState = [ "routable" ];
-
- script = ''
- ${lib.getExe pkgs.ethtool} -K enp42s0 rx-udp-gro-forwarding on rx-gro-list off
- '';
- };
- };
- };
-}