mjallen/nix-config
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

tailscale

Browse Source
This commit is contained in:
mjallen18
2026-01-10 13:36:57 -06:00
parent fcddde0c06
commit dfd8d9a1a8
1 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
systems/x86_64-linux/jallen-nas/services.nix
View File

@@ -1,11 +1,19 @@
{ pkgs, ... }: { pkgs, ... }:
{ {
systemd.network.wait-online.enable = false;
# Force tailscaled to use nftables (Critical for clean nftables-only systems)
# This avoids the "iptables-compat" translation layer issues.
systemd.services.tailscaled.serviceConfig.Environment = [
"TS_DEBUG_FIREWALL_MODE=nftables"
];
networking.nftables.enable = true;
boot.initrd.systemd.network.wait-online.enable = false;
# Services configs # Services configs
services = { services = {
tailscale = { tailscale = {
enable = true; enable = true;
openFirewall = true; openFirewall = true;
useRoutingFeatures = "client"; useRoutingFeatures = "server";
extraUpFlags = [ extraUpFlags = [
"--advertise-exit-node" "--advertise-exit-node"
"--accept-dns=false" "--accept-dns=false"