commit ce4118453f7caee9a89d3d0833b66716dff28872
parent d8c90c8d71f1883d3b57bc6c582b84fc46cfe83d
Author: vin <vin@vineetk.net>
Date: Thu, 25 Sep 2025 19:13:36 -0400
temporarily use tailscale
I need to go back to wireguard directly because even it has routing
issues with another wireguard doing global
routing (i.e. mullvad). I don't think I experienced this before via
headscale, though uh that doesn't make sense now that I think about it
since tailscale client is the one handnling it.
Diffstat:
1 file changed, 12 insertions(+), 8 deletions(-)
diff --git a/hosts/demiurge/default.nix b/hosts/demiurge/default.nix
@@ -262,7 +262,7 @@
interface = [
"127.0.0.1"
"100.64.0.2"
- "fd00:b0ba:cafe:babe::2"
+ #"fd00:b0ba:cafe:babe::2"
"::1"
];
access-control = [
@@ -395,8 +395,9 @@
enable = true;
defaultListenAddresses = [
- "10.0.13.2"
- "fd00:b0ba:cafe:babe::2"
+ "100.64.0.2"
+ #"10.0.13.2"
+ #"fd00:b0ba:cafe:babe::2"
];
recommendedGzipSettings = true;
@@ -452,9 +453,15 @@
openssh = {
enable = true;
+ listenAddresses = [
+ { addr = "127.0.0.1"; port = 22; }
+ { addr = "192.168.1.2"; port = 22; }
+ { addr = "100.64.0.2"; port = 22; }
+ ];
+
settings = {
KbdInteractiveAuthentication = false;
- PasswordAuthentication = false;
+ PasswordAuthentication = true;
PermitRootLogin = "no";
X11Forwarding = true;
};
@@ -997,10 +1004,7 @@
# extra systemd stuff
systemd.services = {
- #nginx = {
- # after = [ "wireguard-wg1.service" ];
- # serviceConfig.Type = lib.mkForce "idle";
- #};
+ nginx.after = [ "tailscaled-autoconnect.service" ];
};
# create caches and use mandoc
