nixos

Archived

This repository has been archived on 2026-07-30. You can view files and clone it. You cannot open issues or pull requests or push a commit.

Files

T

History

beatzaplentyandClaude Sonnet 4.6 cda2132d6a

Check NixOS configurations / eval-hosts (pull_request) Successful in 10m31s

Details

fix(tailscale-router): masquerade LAN traffic into Tailscale

Without SNAT on tailscale0, Tailscale drops forwarded packets from LAN
source IPs (192.168.2.x) because they are not recognised Tailscale
addresses.  With networking.nat.externalInterface = "tailscale0", all
traffic leaving through the Tailscale tunnel is masqueraded to the
router's own Tailscale IP (100.x.x.x), making it indistinguishable from
locally-originated traffic.  Conntrack handles the return path.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-07-26 09:45:07 +10:00

beszel

Fix beszel-agent losing its hub-pairing fingerprint on every restart

2026-07-20 15:59:24 +10:00

boot

Resolve all statix and nixpkgs-fmt warnings repo-wide

2026-07-20 03:47:42 +10:00

build-types

fix(tailscale-router): masquerade LAN traffic into Tailscale

2026-07-26 09:45:07 +10:00

clan

feat(provision): Phase 2 — migrate SSH host keys to clan vars