diff options
| author | Franck Cuny <franck@fcuny.net> | 2023-05-02 19:30:39 -0700 |
|---|---|---|
| committer | Franck Cuny <franck@fcuny.net> | 2023-05-02 19:30:39 -0700 |
| commit | b6d6b6f366c3cbf7e7340f08ea8877bf0a8d45e7 (patch) | |
| tree | c45c1011b194c0982ba82c5f2f06d18941a916ca /profiles/tailscale.nix | |
| parent | profiles/default: move stuff related to boot (diff) | |
| download | infra-b6d6b6f366c3cbf7e7340f08ea8877bf0a8d45e7.tar.gz | |
profiles: consolidates common networking bits
This remove ssh on workstations. I also drop mosh since I don't use it.
Diffstat (limited to 'profiles/tailscale.nix')
| -rw-r--r-- | profiles/tailscale.nix | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/profiles/tailscale.nix b/profiles/tailscale.nix new file mode 100644 index 0000000..61c1a38 --- /dev/null +++ b/profiles/tailscale.nix @@ -0,0 +1,6 @@ +{ ... }: +{ + services.tailscale.enable = true; + networking.firewall.trustedInterfaces = [ "tailscale0" ]; + networking.firewall.checkReversePath = "loose"; +} |