Fix tailscale exit-node module: enable routing, compose on enable-service #11

Merged

beatzaplenty merged 1 commits from worktree-tailscale-exit-node into main

2026-07-20 11:36:24 +00:00

Author	SHA1	Message	Date
beatzaplentyandClaude Sonnet 5	c939454983	Fix tailscale exit-node module: enable routing, compose on enable-service Check NixOS configurations / eval-hosts (pull_request) Failing after 11m52s Details exit-node.nix advertised --advertise-exit-node/--advertise-routes but never enabled IP forwarding, so it wouldn't actually route traffic. services.tailscale.useRoutingFeatures = "server" is the built-in way to get the sysctls right without duplicating modules/networking/enable-ip-forwarding.nix. Also opens the firewall for direct (non-DERP-relayed) peer connections, and now imports enable-service.nix instead of duplicating `enable = true`, so "plain tailscale" and "tailscale exit node" are two composable modules. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-07-20 12:24:18 +10:00

Author

SHA1

Message

Date

beatzaplentyandClaude Sonnet 5

c939454983

Fix tailscale exit-node module: enable routing, compose on enable-service

Check NixOS configurations / eval-hosts (pull_request) Failing after 11m52s

Details

exit-node.nix advertised --advertise-exit-node/--advertise-routes but
never enabled IP forwarding, so it wouldn't actually route traffic.
services.tailscale.useRoutingFeatures = "server" is the built-in way to
get the sysctls right without duplicating modules/networking/enable-ip-forwarding.nix.
Also opens the firewall for direct (non-DERP-relayed) peer connections,
and now imports enable-service.nix instead of duplicating `enable = true`,
so "plain tailscale" and "tailscale exit node" are two composable modules.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-07-20 12:24:18 +10:00