From dba8a2064bb9699697839ec1c2e9198a60fcdd62 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Felix=20Schr=C3=B6ter?= <dev@felschr.com>
Date: Fri, 12 Jan 2024 20:46:03 +0100
Subject: [PATCH] fix(vpn): fix tailscale config

---
 system/vpn.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/system/vpn.nix b/system/vpn.nix
index 601c5d5..b75d997 100644
--- a/system/vpn.nix
+++ b/system/vpn.nix
@@ -15,10 +15,14 @@ in {
     extraUpFlags = [
       "--reset"
       "--accept-routes"
+      "--exit-node-allow-lan-access"
       "--exit-node=de-ber-wg-004.mullvad.ts.net"
     ];
   };
 
+  systemd.services.tailscaled.serviceConfig.Environment =
+    [ "TS_DEBUG_FIREWALL_MODE=auto" ];
+
   # call taiscale up without --auth-key
   systemd.services.tailscaled-autoconnect.script = ''
     status=$(${config.systemd.package}/bin/systemctl show -P StatusText tailscaled.service)