nix/hosts/marvin/services/tailscale.nix
2022-07-15 22:05:23 -04:00

11 lines
254 B
Nix

{config, ...}: {
services.tailscale = {
enable = true;
permitCertUid = "962";
};
networking.firewall = {
trustedInterfaces = ["tailscale0"];
allowedUDPPorts = [config.services.tailscale.port];
checkReversePath = "loose";
};
}