mirror of
https://github.com/ryan4yin/nix-config.git
synced 2026-06-07 15:12:44 +02:00
Ryan Yin
662316c18a
* flake.lock: Update
Flake lock file updates:
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/7aaa00e7cc9be6c316cb5f6617bd740dd435c59d?narHash=sha256-WacE23EbHTsBKvr8cu%2B1DFNbP6Rh1brHUH5SDUI0NQI%3D' (2026-04-30)
→ 'github:NixOS/nixpkgs/e9a7635a57597d9754eccebdfc7045e6c8600e6b?narHash=sha256-u6WU/yd/o8iYQrHX3RAwO1hYa3LkoSL%2BWNQD0rJfJZQ%3D' (2026-05-29)
* feat: upgrade to nixos 26.05
48 lines
1.5 KiB
Nix
48 lines
1.5 KiB
Nix
{
|
|
lib,
|
|
pkgs,
|
|
...
|
|
}:
|
|
# =============================================================
|
|
#
|
|
# Tailscale - your own private network(VPN) that uses WireGuard
|
|
#
|
|
# It's open source and free for personal use,
|
|
# and it's really easy to setup and use.
|
|
# Tailscale has great client coverage for Linux, windows, Mac, android, and iOS.
|
|
# Tailscale is more mature and stable compared to other alternatives such as netbird/netmaker.
|
|
#
|
|
# How to use:
|
|
# 1. Create a Tailscale account at https://login.tailscale.com
|
|
# 2. Login via `tailscale login`
|
|
# 3. join into your Tailscale network via `tailscale up --accept-routes`
|
|
# 4. If you prefer automatic connection to Tailscale, use the `authKeyFile` option` in the config below.
|
|
#
|
|
# Status Data:
|
|
# `journalctl -u tailscaled` shows tailscaled's logs
|
|
# logs indicate that tailscale store its data in /var/lib/tailscale
|
|
# which is already persistent across reboots(via preservation)
|
|
#
|
|
# References:
|
|
# https://github.com/NixOS/nixpkgs/blob/nixos-26.05/nixos/modules/services/networking/tailscale.nix
|
|
#
|
|
# =============================================================
|
|
{
|
|
# make the tailscale command usable to users
|
|
environment.systemPackages = [ pkgs.tailscale ];
|
|
|
|
# enable the tailscale service
|
|
services.tailscale = {
|
|
enable = true;
|
|
port = 41641;
|
|
interfaceName = "tailscale0";
|
|
# allow the Tailscale UDP port through the firewall
|
|
openFirewall = true;
|
|
|
|
useRoutingFeatures = "client";
|
|
extraSetFlags = [
|
|
"--accept-routes"
|
|
];
|
|
};
|
|
}
|