nix/hosts/marvin/services/tailscale.nix
2022-06-29 16:07:04 -04:00

11 lines
258 B
Nix

{config, ...}: {
services.tailscale = {
enable = true;
permitCertUid = "962";
};
networking.firewall = {
trustedInterfaces = [ "tailscale0" ];
allowedUDPPorts = [ config.services.tailscale.port ];
checkReversePath = "loose";
};
}