diff options
| author | Fuwn <[email protected]> | 2024-09-11 00:52:32 -0700 |
|---|---|---|
| committer | Fuwn <[email protected]> | 2024-09-11 00:52:32 -0700 |
| commit | b6956dd32fbe4bd6a83336a66c3ff73ec47c7b9c (patch) | |
| tree | 5e61c8151b6cde865405d61fb9c1f7bd65c9f662 /modules/software/networking/vpn/tailscale.nix | |
| parent | Bump: swift (diff) | |
| download | nixos-config-b6956dd32fbe4bd6a83336a66c3ff73ec47c7b9c.tar.xz nixos-config-b6956dd32fbe4bd6a83336a66c3ff73ec47c7b9c.zip | |
Bump: i2p
Diffstat (limited to 'modules/software/networking/vpn/tailscale.nix')
| -rw-r--r-- | modules/software/networking/vpn/tailscale.nix | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/modules/software/networking/vpn/tailscale.nix b/modules/software/networking/vpn/tailscale.nix new file mode 100644 index 0000000..21f471a --- /dev/null +++ b/modules/software/networking/vpn/tailscale.nix @@ -0,0 +1,15 @@ +{ config, ... }: +{ + networking.firewall.trustedInterfaces = [ "${config.services.tailscale.interfaceName}" ]; + + services.tailscale = { + enable = true; + useRoutingFeatures = "both"; + }; + + # <https://tailscale.com/kb/1019/subnets/?tab=linux#step-1-install-the-tailscale-client> + boot.kernel.sysctl = { + "net.ipv4.ip_forward" = true; + "net.ipv6.conf.all.forwarding" = true; + }; +} |