refactor(vars,hosts): networking & k3s clusters

hosts/12kingdoms-rakushun/default.nix

@@ -11,7 +11,6 @@
 #############################################################
 let
   hostName = "rakushun"; # Define your hostname.
-  hostAddress = myvars.networking.hostAddress.${hostName};
 in {
   imports = [
     # import the rk3588 module, which contains the configuration for bootloader/kernel/firmware
@@ -23,23 +22,14 @@ in {
 
     ./gitea.nix
     ./caddy.nix
+    ./tailscale.nix
   ];
 
   networking = {
     inherit hostName;
     inherit (myvars.networking) defaultGateway nameservers;
-
+    inherit (myvars.networking.hostsInterface.${hostName}) interfaces;
     networkmanager.enable = false;
-    # RJ45 port 1
-    interfaces.enP4p65s0 = {
-      useDHCP = false;
-      ipv4.addresses = [hostAddress];
-    };
-    # RJ45 port 2
-    # interfaces.enP3p49s0 = {
-    # useDHCP = false;
-    # ipv4.addresses = [hostAddress];
-    # };
   };
 
   # This value determines the NixOS release from which the default

hosts/12kingdoms-rakushun/tailscale.nix

@@ -0,0 +1,46 @@
+{
+  config,
+  pkgs,
+  ...
+}:
+# =============================================================
+#
+# Tailscale - your own private network(VPN) that uses WireGuard
+#
+# It's open souce and free for personal use,
+# and it's really easy to setup and use.
+# Tailscale has great client coverage for Linux, windows, Mac, android, and iOS.
+# Tailscale is more mature and stable compared to other alternatives such as netbird/netmaker.
+# Maybe I'll give netbird/netmaker a try when they are more mature, but for now, I'm sticking with Tailscale.
+#
+# How to use:
+#  1. Create a Tailscale account at https://login.tailscale.com
+#  2. Login via `tailscale login`
+#  3. join into your Tailscale network via `tailscale up --advertise-routes 192.168.5.0/24`
+#  4. If you prefer automatic connection to Tailscale, use the `authKeyFile` option` in the config below.
+#
+# Status Data:
+#   `journalctl -u tailscaled` shows tailscaled's logs
+#   logs indicate that tailscale store its data in /var/lib/tailscale
+#   which is already persistent across reboots(via impermanence.nix)
+#
+# References:
+# https://github.com/NixOS/nixpkgs/blob/nixos-23.11/nixos/modules/services/networking/tailscale.nix
+#
+# =============================================================
+{
+  # make the tailscale command usable to users
+  environment.systemPackages = [pkgs.tailscale];
+
+  # enable the tailscale service
+  services.tailscale = {
+    enable = true;
+    port = 41641;
+    interfaceName = "tailscale0";
+    # allow the Tailscale UDP port through the firewall
+    openFirewall = true;
+    useRoutingFeatures = "server";
+    extraUpFlags = "--advertise-routes 192.168.5.0/24";
+    # authKeyFile = "/var/lib/tailscale/authkey";
+  };
+}