5 Commits

Include renames

Author	SHA1	Message	Date
beatzaplenty	ac8c9a20e3	Merge pull request 'Fix tailscale exit-node module: enable routing, compose on enable-service' (#11) from worktree-tailscale-exit-node into main ... Reviewed-on: #11	2026-07-20 11:36:18 +00:00
beatzaplentyandClaude Sonnet 5	9724babcea	Add tailscale-exit-node build type across all three platforms ... New build type dedicated to Tailscale exit-node capability, wired up for linode/proxmox/lxc like every other build type (the lxc variant is the one actually intended for deployment). Kept separate from the "server" host rather than bundling exit-node capability onto it. Trimmed modules/tailscale/exit-node.nix down to pure exit-node behavior: dropped the old --advertise-routes=${vars.lanCidr} bundling (meaningless for a Linode-hosted VPS with no path to the LAN), and switched extraUpFlags -> extraSetFlags. Confirmed against nixpkgs' tailscale.nix that extraUpFlags is only applied by tailscaled-autoconnect, which itself only runs when services.tailscale.authKeyFile is set -- nothing in this repo sets one, so the old flags would never have actually been applied. extraSetFlags runs unconditionally via tailscaled-set on every boot, so --advertise-exit-node self-reapplies once the operator has done the one-time manual `tailscale up` auth. Verified: all three new targets eval cleanly, nixpkgs-fmt/statix clean, and a dry-run build of lxc-tailscale-exit-node's tarball resolves its full closure including tailscaled-set.service. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01La55Nsss8jZ7ZuzUV9mfot	2026-07-20 13:38:39 +10:00
beatzaplentyandClaude Sonnet 5	c939454983	Fix tailscale exit-node module: enable routing, compose on enable-service ... exit-node.nix advertised --advertise-exit-node/--advertise-routes but never enabled IP forwarding, so it wouldn't actually route traffic. services.tailscale.useRoutingFeatures = "server" is the built-in way to get the sysctls right without duplicating modules/networking/enable-ip-forwarding.nix. Also opens the firewall for direct (non-DERP-relayed) peer connections, and now imports enable-service.nix instead of duplicating `enable = true`, so "plain tailscale" and "tailscale exit node" are two composable modules. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-07-20 12:24:18 +10:00
beatzaplentyandClaude Sonnet 5	eadb1e35ce	Centralize shared values into variables.nix ... One file (variables.nix) holding every value that was previously hardcoded and repeated across modules: LAN domain/CIDR, home/tailnet domains, cross-host references (nix-cache substituter hostname, NFS server hostname, remote-builder user), PXE/PBS IPs, timezone, and the primary username. Wired in via flake.nix's specialArgs (and home-manager's extraSpecialArgs for the two home.nix files), so any module picks it up by just adding `vars` to its function arguments — no explicit import needed. Two hosts (nix-cache, server) now derive their own networking.hostName from the same variable other hosts use to reach them, so there's exactly one place to change either identifier. Purely mechanical: every substituted value matches what was already there, confirmed by identical toplevel .drv paths for all 17 targets before and after. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-07-19 14:51:37 +10:00
beatzaplenty	9fef163850	updated module directory structure	2026-07-13 00:56:19 +10:00