diff options
Diffstat (limited to 'nixos/opt')
| -rw-r--r-- | nixos/opt/tailscale.nix | 7 |
1 files changed, 0 insertions, 7 deletions
diff --git a/nixos/opt/tailscale.nix b/nixos/opt/tailscale.nix index a14c93b..50244cb 100644 --- a/nixos/opt/tailscale.nix +++ b/nixos/opt/tailscale.nix @@ -1,24 +1,17 @@ { config, pkgs, ... }: { - # 1. Enable the service and the firewall services.tailscale.enable = true; networking.nftables.enable = true; networking.firewall = { enable = true; - # Always allow traffic from your Tailscale network trustedInterfaces = [ "tailscale0" ]; - # Allow the Tailscale UDP port through the firewall allowedUDPPorts = [ config.services.tailscale.port ]; }; - # 2. Force tailscaled to use nftables (Critical for clean nftables-only systems) - # This avoids the "iptables-compat" translation layer issues. systemd.services.tailscaled.serviceConfig.Environment = [ "TS_DEBUG_FIREWALL_MODE=nftables" ]; - # 3. Optimization: Prevent systemd from waiting for network online - # (Optional but recommended for faster boot with VPNs) systemd.network.wait-online.enable = false; boot.initrd.systemd.network.wait-online.enable = false; } |