From ce4118453f7caee9a89d3d0833b66716dff28872 Mon Sep 17 00:00:00 2001
From: vin <vin@vineetk.net>
Date: Thu, 25 Sep 2025 19:13:36 -0400
Subject: temporarily use tailscale

I need to go back to wireguard directly because even it has routing
issues with another wireguard doing global
routing (i.e. mullvad). I don't think I experienced this before via
headscale, though uh that doesn't make sense now that I think about it
since tailscale client is the one handnling it.
---
 hosts/demiurge/default.nix | 20 ++++++++++++--------
 1 file changed, 12 insertions(+), 8 deletions(-)

diff --git a/hosts/demiurge/default.nix b/hosts/demiurge/default.nix
index 9a4223c..236c726 100644
--- a/hosts/demiurge/default.nix
+++ b/hosts/demiurge/default.nix
@@ -262,7 +262,7 @@
           interface = [
             "127.0.0.1"
             "100.64.0.2"
-            "fd00:b0ba:cafe:babe::2"
+            #"fd00:b0ba:cafe:babe::2"
             "::1"
           ];
           access-control = [
@@ -395,8 +395,9 @@
       enable = true;
 
       defaultListenAddresses = [
-        "10.0.13.2"
-        "fd00:b0ba:cafe:babe::2"
+        "100.64.0.2"
+        #"10.0.13.2"
+        #"fd00:b0ba:cafe:babe::2"
       ];
 
       recommendedGzipSettings = true;
@@ -452,9 +453,15 @@
     openssh = {
       enable = true;
 
+      listenAddresses = [
+        { addr = "127.0.0.1"; port = 22; }
+        { addr = "192.168.1.2"; port = 22; }
+        { addr = "100.64.0.2"; port = 22; }
+      ];
+
       settings = {
         KbdInteractiveAuthentication = false;
-        PasswordAuthentication = false;
+        PasswordAuthentication = true;
         PermitRootLogin = "no";
         X11Forwarding = true;
       };
@@ -997,10 +1004,7 @@
 
   # extra systemd stuff
   systemd.services = {
-    #nginx = {
-    #  after = [ "wireguard-wg1.service" ];
-    #  serviceConfig.Type = lib.mkForce "idle";
-    #};
+    nginx.after = [ "tailscaled-autoconnect.service" ];
   };
 
   # create caches and use mandoc
-- 
cgit v1.2.3