added tailscale exit node module and enabled on server

2026-07-08 12:48:52 +10:00
parent f9c0f01aba
commit eb2d3e3260
4 changed files with 29 additions and 3 deletions
@@ -127,11 +127,11 @@
    },
    "nixpkgs_2": {
      "locked": {
-        "lastModified": 1783148766,
-        "narHash": "sha256-uslt2pqShTIXDdAHRHv2QkYLsVdY8Oqwz0EA48/RSM8=",
+        "lastModified": 1783389287,
+        "narHash": "sha256-0xIy4dVLqq47rA+mRy0hXDfjhQd4E5PoIns/RmB7nR4=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "a50de1b7d8a586adc18d2395c19de7d6058e6030",
+        "rev": "0ad6f47ea4fe188f4bc8f0380f93ae8523337c6c",
        "type": "github"
      },
      "original": {
@@ -12,6 +12,8 @@
      ../../common/configuration.nix
      ../../modules/nix/cache-client.nix
      ../../modules/nix/remote-builder-client.nix
+      ../../modules/nix/tailscale-exit-node.nix
+      ../../modules/nix/enable-ip-forwading.nix
    ];

    
@@ -0,0 +1,12 @@
+{ config, lib, ... }:
+
+{
+  options.myNetworking.ipForwarding.enable = lib.mkEnableOption "Enable IPv4 and IPv6 forwarding";
+
+  config = lib.mkIf config.myNetworking.ipForwarding.enable {
+    boot.kernel.sysctl = {
+      "net.ipv4.ip_forward" = 1;
+      "net.ipv6.conf.all.forwarding" = 1;
+    };
+  };
+}
@@ -0,0 +1,12 @@
+{ ... }:
+
+{
+  services.tailscale = {
+    enable = true;
+
+    extraUpFlags = [
+      "--advertise-exit-node"
+      "--advertise-routes=192.168.2.0/24"
+    ];
+  };
+}