nixos-config

commit fc526f214a340dae1ae4a811170120bd63ea2690
parent 60afc6688d7174d00200cd40c620c2eef7e3e53a
Author: vin <vin@vineetk.net>
Date:   Mon,  3 Mar 2025 00:24:45 -0500

demiurge: use authkey for running tailscale on start

Diffstat:
M
hosts/demiurge/default.nix
 | 
5
++++-

1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/hosts/demiurge/default.nix b/hosts/demiurge/default.nix
@@ -26,7 +26,7 @@
 
     firewall = {
       allowedTCPPorts = [ 22 80 443 ];
-      allowedUDPPorts = [ 41641 51413 ];
+      allowedUDPPorts = [ 51413 ];
     };
 
     wireguard.interfaces = {
@@ -799,7 +799,10 @@ LQIhANgsvYmyCp/Nur2RKaV25CDg3kMYVBXED2HVDy8qa+3i
     # vpn
     tailscale = {
       enable = true;
+      authKeyFile = "/run/secrets/tailscale_key";
       extraDaemonFlags = [ "--no-logs-no-support" ];
+      extraUpFlags = [ "--login-server=https://headscale.13f0.net" ];
+      openFirewall = true;
     };
 
     # torrents