From da900f6014b8fa65c5e097acfe6d949aee4a4179 Mon Sep 17 00:00:00 2001 From: Aargh Rai Date: Wed, 29 Jul 2026 17:30:51 +0530 Subject: ventoy & tailscale --- nixos/opt/tailscale.nix | 7 ------- 1 file changed, 7 deletions(-) (limited to 'nixos/opt') diff --git a/nixos/opt/tailscale.nix b/nixos/opt/tailscale.nix index a14c93b..50244cb 100644 --- a/nixos/opt/tailscale.nix +++ b/nixos/opt/tailscale.nix @@ -1,24 +1,17 @@ { config, pkgs, ... }: { - # 1. Enable the service and the firewall services.tailscale.enable = true; networking.nftables.enable = true; networking.firewall = { enable = true; - # Always allow traffic from your Tailscale network trustedInterfaces = [ "tailscale0" ]; - # Allow the Tailscale UDP port through the firewall allowedUDPPorts = [ config.services.tailscale.port ]; }; - # 2. Force tailscaled to use nftables (Critical for clean nftables-only systems) - # This avoids the "iptables-compat" translation layer issues. systemd.services.tailscaled.serviceConfig.Environment = [ "TS_DEBUG_FIREWALL_MODE=nftables" ]; - # 3. Optimization: Prevent systemd from waiting for network online - # (Optional but recommended for faster boot with VPNs) systemd.network.wait-online.enable = false; boot.initrd.systemd.network.wait-online.enable = false; } -- cgit v1.2.3