summaryrefslogtreecommitdiff
path: root/modules/nixos
diff options
context:
space:
mode:
Diffstat (limited to 'modules/nixos')
-rw-r--r--modules/nixos/features/tailscale.nix8
1 files changed, 3 insertions, 5 deletions
diff --git a/modules/nixos/features/tailscale.nix b/modules/nixos/features/tailscale.nix
index 042426b..1c307bb 100644
--- a/modules/nixos/features/tailscale.nix
+++ b/modules/nixos/features/tailscale.nix
@@ -26,26 +26,24 @@ in {
allowedUDPPorts = [config.services.tailscale.port];
trustedInterfaces = ["tailscale0"];
}
- // (mkIf cfg.ssh.enable {
+ // lib.optionalAttrs cfg.ssh.enable {
allowedTCPPorts = [22];
- });
+ };
services = {
tailscale.enable = mkDefault true;
};
+ # https://tailscale.com/kb/1096/nixos-minecraft/
systemd.services.tailscale-autoconnect = {
description = "Automatic connection to Tailscale";
- # make sure tailscale is running before trying to connect to tailscale
after = ["network-pre.target" "tailscale.service"];
wants = ["network-pre.target" "tailscale.service"];
wantedBy = ["multi-user.target"];
- # set this service as a oneshot job
serviceConfig.Type = "oneshot";
- # have the job run this shell script
script = let
inherit (pkgs) tailscale jq;
in ''