felschr/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(vpn): improve tailscale routing

Browse source
This commit is contained in:
Felix Schröter 2025-06-06 18:05:31 +02:00
parent 5b7be699f3
commit 7ac80d78f1
Signed by: felschr
GPG key ID: 671E39E6744C807D
2 changed files with 2 additions and 1 deletions
hosts/home-server
default.nix
system
vpn.nix

1
hosts/home-server/default.nix
View file

@ -128,6 +128,7 @@ in
inherit hostKeys; inherit hostKeys;
}; };
services.tailscale.useRoutingFeatures = "both";
services.tailscale.extraUpFlags = [ services.tailscale.extraUpFlags = [
# "--accept-routes" # breaks incoming connections from outside Tailnet # "--accept-routes" # breaks incoming connections from outside Tailnet
"--advertise-tags=tag:felschr-com" "--advertise-tags=tag:felschr-com"

2
system/vpn.nix
View file

@ -19,7 +19,7 @@ in
enable = true; enable = true;
package = pkgs.unstable.tailscale; package = pkgs.unstable.tailscale;
openFirewall = true; openFirewall = true;
useRoutingFeatures = "both"; useRoutingFeatures = lib.mkDefault "client";
extraUpFlags = [ extraUpFlags = [
"--reset" "--reset"
"--exit-node-allow-lan-access" "--exit-node-allow-lan-access"