add semi colons

flake.lock

@@ -127,11 +127,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1783148766,
-        "narHash": "sha256-uslt2pqShTIXDdAHRHv2QkYLsVdY8Oqwz0EA48/RSM8=",
+        "lastModified": 1783389287,
+        "narHash": "sha256-0xIy4dVLqq47rA+mRy0hXDfjhQd4E5PoIns/RmB7nR4=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "a50de1b7d8a586adc18d2395c19de7d6058e6030",
+        "rev": "0ad6f47ea4fe188f4bc8f0380f93ae8523337c6c",
         "type": "github"
       },
       "original": {

hosts/docker/configuration.nix

@@ -41,6 +41,15 @@ boot.zfs.forceImportRoot = false;
 #    experimental = true;
 #  };
 };
+
+services.beszel.agent.enable = true;
+services.beszel.agent.environment = {
+DOCKER_HOST = "tcp://docker-socket-proxy:2375";
+HUB_URL = "http://beszel:8090";
+KEY = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA2Snq66P/6GwTEafKuu3D/V1f7ofjKL9GD6ik+Kf/Gn";
+TOKEN = "235b3-25a94f482-84576-40d34c48";
+};
+
   services.tailscale.enable = true;
   # Enable docker-compose
   environment.systemPackages = with pkgs; [
@@ -199,6 +208,7 @@ systemd.tmpfiles.rules = [
 
   # Create /home/nixos/docker -> /mnt/docker-config
   "L+ /home/nixos/docker - - - - /mnt/docker/config"
+  "d /mnt/docker 0755 nixos users -"
 
 ];
 

hosts/server/configuration.nix

@@ -12,6 +12,8 @@
       ../../common/configuration.nix
       ../../modules/nix/cache-client.nix
       ../../modules/nix/remote-builder-client.nix
+#      ../../modules/nix/tailscale-exit-node.nix
+#      ../../modules/nix/enable-ip-forwarding.nix
     ];
 
     

modules/nix/cache-server.nix

@@ -41,7 +41,8 @@
     openssh.authorizedKeys.keys = ["ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFDEA1S2ikpObREgbP5uVBWMxIOGbY8B+Wx7VTZK1m6t root@server"
 					"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPAYIT9ormlmxZ0SziyDQaUntnKI8HK9/s3Qac1ZKjP2 root@docker" 
 					"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKKKzoEPl/ZW9KBRHBcp6/ThOngGpwMv5EhkTlgC4aDf root@nixos"
-					"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIGtOWOCS+ImHc7NehguoyD7PbonGosKMZqc9+QR3v/h root@nixos"];
+					"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIGtOWOCS+ImHc7NehguoyD7PbonGosKMZqc9+QR3v/h root@nixos"
+					"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHxXTQxFnArK5HXG7czeoybZebCGfxpUdusJkPn+BCSp root@server"];
   };
 
   services.openssh.enable = true;

modules/nix/enable-ip-forwarding.nix

@@ -0,0 +1,12 @@
+{ config, lib, ... }:
+
+{
+  options.myNetworking.ipForwarding.enable = lib.mkEnableOption "Enable IPv4 and IPv6 forwarding";
+
+  config = lib.mkIf config.myNetworking.ipForwarding.enable {
+    boot.kernel.sysctl = {
+      "net.ipv4.ip_forward" = 1;
+      "net.ipv6.conf.all.forwarding" = 1;
+    };
+  };
+}

modules/nix/tailscale-exit-node.nix

@@ -0,0 +1,12 @@
+{ ... }:
+
+{
+  services.tailscale = {
+    enable = true;
+
+    extraUpFlags = [
+      "--advertise-exit-node"
+      "--advertise-routes=192.168.2.0/24"
+    ];
+  };
+}