felschr/nixos-config
1
1
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

fix(vpn): disable --accept-routes on home-server

Browse source 
This caused some issues for me when trying to access home-server
services from other devices in my LAN that aren't in the Tailnet.
This commit is contained in:
Felix Schröter 2024-12-08 21:32:57 +01:00
parent ac00b5153e
commit 1043b12ec9
Signed by: felschr
GPG key ID: 671E39E6744C807D
3 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
hosts/home-pc.nix
View file

@ -42,6 +42,7 @@
}; };
services.tailscale.extraUpFlags = [ services.tailscale.extraUpFlags = [
"--accept-routes"
"--operator=felschr" "--operator=felschr"
"--advertise-routes=192.168.1.0/24" "--advertise-routes=192.168.1.0/24"
]; ];

2
hosts/home-server.nix
View file

@ -129,7 +129,7 @@ in
}; };
services.tailscale.extraUpFlags = [ services.tailscale.extraUpFlags = [
"--advertise-routes=192.168.1.0/24" # "--accept-routes" # breaks incoming connections from outside Tailnet
"--advertise-tags=tag:felschr-com" "--advertise-tags=tag:felschr-com"
"--advertise-connector" "--advertise-connector"
]; ];

1
system/vpn.nix
View file

@ -22,7 +22,6 @@ in
useRoutingFeatures = "both"; useRoutingFeatures = "both";
extraUpFlags = [ extraUpFlags = [
"--reset" "--reset"
"--accept-routes"
"--exit-node-allow-lan-access" "--exit-node-allow-lan-access"
"--exit-node=de-dus-wg-001.mullvad.ts.net" "--exit-node=de-dus-wg-001.mullvad.ts.net"
]; ];