nixos-config

commit de5d8e669d6c6934837946d8b75e94bcad7f7fd2
parent ffe481d03b085c5ff2fcd8a10b1e3eb08ac85d84
Author: vin <vin@vineetk.net>
Date:   Mon,  3 Mar 2025 02:08:33 -0500

demiurge: set as tailscale exit node

Finally the main purpose of switching to headscale/tailscale from
plain Wireguard has been done! (combined home and mullvad on iOS)

Diffstat:
M
hosts/demiurge/default.nix
 | 
10
+++++++++-

1 file changed, 9 insertions(+), 1 deletion(-)
diff --git a/hosts/demiurge/default.nix b/hosts/demiurge/default.nix
@@ -24,6 +24,11 @@
 
   # boot options
   boot = {
+    kernel.sysctl = {
+      "net.ipv4.ip_forward" = true;
+      "net.ipv6.conf.all.forwarding" = true;
+    };
+
     loader = {
       systemd-boot.enable = true;
       efi.canTouchEfiVariables = true;
@@ -816,7 +821,10 @@ LQIhANgsvYmyCp/Nur2RKaV25CDg3kMYVBXED2HVDy8qa+3i
       enable = true;
       authKeyFile = config.age.secrets.tailscale_demiurge.path;
       extraDaemonFlags = [ "--no-logs-no-support" ];
-      extraUpFlags = [ "--login-server=https://headscale.13f0.net" ];
+      extraUpFlags = [
+        "--login-server=https://headscale.13f0.net"
+        "--advertise-exit-node"
+      ];
       openFirewall = true;
     };