modules.services.tailscale: enable as default

devices/cross/secrets/default.yaml

@@ -35,6 +35,7 @@ telegram:
 maxmind: ENC[AES256_GCM,data:KfTXvxX4zzXBfNMPmZY1z5jTHTByGfH9qEo6EUAQqZ1JOtNUomOWNQ==,iv:KcexOWAXFhWfli6bAMZ+61x960trZ3iE9UYMuOtJNms=,tag:reuuIe6MkONpeT44U6yUjQ==,type:str]
 acme:
     token: ENC[AES256_GCM,data:DrNdcyf2tiZ5nmjYmsG13V63ZuZhNG1c/kkGM7eXQWvRvDbu37nKWA==,iv:xc4gtNvZ/BYG+KmT1XgFfG3Z17bBLURazG8tz4/laxE=,tag:khnYVQWjiiaQC9VsJyLV6A==,type:str]
+tailscale: ENC[AES256_GCM,data:ajw332lHmxY8mdaxeG6zLui3Coc7z/3+ojBIcZHBY8KhpRbEiAj6n8yIIj/7BffR,iv:oqCBZsrYz6bMax96QQVWhcXnppx676TbUh3Vl4qJh00=,tag:557nZp1SE7NsUii7QUtSeQ==,type:str]
 sops:
     age:
         - recipient: age19ax6vm3pv8rph5tq3mmehd9sy9jk823tw8svsd790r0lkslycquqvlwz9m
@@ -163,7 +164,7 @@ sops:
             VTJxVW9NYWloQ3F1bG8wLzN5elMzWlUKACcT9RmwQhJ+dTNFgdwnm8zXACxrZrR0
             ebwf67RoLjLooFQrA3LarvwlUl+6to5ZozBjdnhfZWsIuiGHy2ecFA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-11-05T15:22:01Z"
-    mac: ENC[AES256_GCM,data:xLzh7td2sPtSqpit5eedeAfYs9JRvAxXO0203Ay7Aqx1VrfnhbMnQECe0qziteXCGAoRJAcDvweyWhektLky6KxpC8Il7RVbz8FxgcHjHT2dbaZUrZoGJni4TNPbRK5psOzu0pzt/QoAvPnrkBQ45+2kMfZVUtaDu4yQehSDot0=,iv:PpfdrGwAjm7Tgb59uvOAxw/9bXLT3p5FEP21sbPXQTk=,tag:nFo9Bc1u90e5Pop2igGNTQ==,type:str]
+    lastmodified: "2025-11-06T12:38:15Z"
+    mac: ENC[AES256_GCM,data:aIN1vCZVyKnZYmsWwTuClQT+Xsqx46HpFQo/4ZYu4V8WcDtR8UaIH2K/vq6LiJ3bSD06xxR3U9Ljc67hhehiFLMJr00l4KoczLvYYiQZKWC95A/OTyK1UeMMyioBYguDrmIKQiR+sUF/juPn7BjXdygYuVzkH7iLiTz4DczjIhE=,iv:zOZY/pBxieuNhWXonF/mq/0NoM2pgfWMyekx1C+LV78=,tag:EYZndCzRzV+v3icoESW+CQ==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.10.2

devices/pc/default.nix

@@ -87,7 +87,6 @@ inputs:
         lumericalLicenseManager.macAddress = "10:5f:ad:10:3e:ca";
         waydroid = {};
         open-webui.ollamaHost = "127.0.0.1";
-        tailscale = {};
       };
       bugs = [ "xmunet" "amdpstate" "iwlwifi" ];
       packages = { mathematica = {}; vasp = {}; lumerical = {}; };

devices/pc/secrets/default.yaml

@@ -19,7 +19,6 @@ tinc: ENC[AES256_GCM,data:qI2KAyJiC9m+IOzTQ7SFjWnjzzkxvNe6R2yxyK+C/YnEK4JdYqEETI
 open-webui:
     openai: ENC[AES256_GCM,data:8CQLvoDuGtQ7PN+1SOmXF48dV/G6fDOiu6olkhSbWEjYcNO4VVmxtHw=,iv:rKBxOTB7/LXfXWVrBFBJeyn43R82oBYCxup8OzWvzKk=,tag:ByoyMizWc9Lpnt+ciYcszg==,type:str]
     webui: ENC[AES256_GCM,data:G0fniAii8asP+NNTinHwrScrFVkFacoci6BvA24=,iv:ADQVIuf60eTDMwW7BAsfDhoTtsFKF5QDLsDkPAQxFBU=,tag:5siIJGNEa11EeHlurk1h5w==,type:str]
-tailscale: ENC[AES256_GCM,data:IkZaLVFO+UfTA7WIjOjiy7PKbfKzhO52WwVXQthat0PnjvvL2cxdza/ic4NtzpZK,iv:pftLbWBH/skX01wHXbFOJvivf4lnqtzXpioM6kYUiXk=,tag:jHGcCBuLA46D1DSg6me/KA==,type:str]
 sops:
     age:
         - recipient: age19ax6vm3pv8rph5tq3mmehd9sy9jk823tw8svsd790r0lkslycquqvlwz9m
@@ -40,7 +39,7 @@ sops:
             OUlxNjdQaXdXMkZ6bnV1ek4yZ2dpbkEKpKGOAxo5Eef2jtGrg4iSzmGCeg+vTgvu
             +K8b+O19MIkGMDBm6UbYUPtc/7eqoEZRiTUzNMTmfkLVS4ul5zou9A==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-11-06T11:46:32Z"
-    mac: ENC[AES256_GCM,data:ab9wvm4d1NK95v6nB/G7Hxy6bPmwdIqyUWuSBk/QGvRC2Avw4m5U60AL6iI8nVek4yukdBZm0efu1tVDDlNbVV5rU5EN7VQAChHd3QNDFEVTsDWxugbl8NUEYa/bWEqut16s6kU6lFwyMovO82Kxppy0VwB/7p0SsEc9bv2zJJo=,iv:FckYgIvo9pgFt4mgaArxeDDRx5bHZM88DepqvwM2yH4=,tag:F2A4e19ltYAqd4CAvEC7/A==,type:str]
+    lastmodified: "2025-11-06T12:37:57Z"
+    mac: ENC[AES256_GCM,data:7iy/orIRUCtFhTaHdskIYu7b9a3uqM4xz+2hRSAvJ7HeKEWFcgCOhE8t5jPkXTi8gMciw/I60015k+GF/mY7cK2Sa/HiWptGwhKAr1jNF4LgJN13eG+7HLQ7Y2SopAzVV2+j0Sit7gsg8x+a1hR/Xi6OBu8ecjyW//Rcelj/Lwc=,iv:F82F+w7BRO3ubZjzV2TU4d0pqbf9d6gUAEZ5YOzEQ1M=,tag:TKMi/mHSqtVv+kvhRbRxmQ==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.10.2

devices/vps6/default.nix

@@ -61,7 +61,6 @@ inputs:
         beesd."/" = {};
         bind = {};
         headscale = {};
-        tailscale = {};
       };
     };
     networking.nftables.tables.forward =

devices/vps6/secrets.yaml

@@ -48,7 +48,6 @@ xray-xmu-client:
 tinc: ENC[AES256_GCM,data:E3OrPA67R48x5FJUW0ZbERlclz8Z/XokAaGTeBQLPEHSeqEArHYSZkdJRZejFrBruJPlGZMPNBQzlIBXOfXKwMnlBDaGJIIJHIzPDGG9W7QF4IIRK/BjVZHFwfKvZtbUDGsqLcCSe5+ttmyucBaFGquXhnD/Tu09uyWtRvS10KAJLY0Z2/16CFB1+8egJIcYw2TFXObo+KR92Va0qwiDSepKaJtYLimDGRKk04QGj+BYa5y8PjIG6bz8UG82mmCiV7XM3EPlSMA=,iv:kawsklNGFbRhxKuUwvNL2WyBxuYu2T/uks1cJ4i8NhA=,tag:V+jAaxQX7JCiR5+wIVW4Nw==,type:str]
 postgresql:
     headscale: ENC[AES256_GCM,data:z2cyyT1TcIhNJCBeGn072aFI2nAioWZQvpyzoky4tWtMymKlw4ilOtSYAsp+kaNOoqvWSmoAQNJLNzeDk1iTCQ==,iv:hZdS/CAVBO0k/AmX3qw3YwTYgK49Aeu5QI3YCAduiZ0=,tag:2l4GPV/T2GHjAAUDX3LaEA==,type:str]
-tailscale: ENC[AES256_GCM,data:jRJQmLYwJRjslPNO3VnVGEJxe+kzmSGpHRTpacF4yrp8+lcifAX2YH1109M1xB+z,iv:2NPAxzyhgfPn7H5/yt9Uozzx0ltKnS0mk23U4qOEQpA=,tag:B9kQ8U/aqP/m9bEH0q8Rcg==,type:str]
 sops:
     age:
         - recipient: age19ax6vm3pv8rph5tq3mmehd9sy9jk823tw8svsd790r0lkslycquqvlwz9m
@@ -69,7 +68,7 @@ sops:
             ZXFTU3ZCaW1pTVh0RUJzdDdGdHlPYTgK2mlgcX2kEc8+2UDdBnhUm6IIuh8V6agW
             ooxH9OEPXUVI/4JcDo4v8ZUhAyU1ehLH0Ef7PJCChOZe2KZmWSNbhA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-11-06T11:46:54Z"
-    mac: ENC[AES256_GCM,data:31JLVHnXd9jYXrFmSY9gfhpnq8B+frl8s3j4WhVrl/7cLjmw04agivYAOKORvEnAWS2p7e5PIPqoNX3m2tf394I+TiuDW2bWcdgs/LluvOEnIhV0Ybdrhp0W3esG6i4qRmif2i47G/mHiyKMttyRsH1K7UnaMNPtxlnMkpgDdTw=,iv:Thf+tDU6gYw53ZDN6LINczp/LstsYW1Cfkqa86ULx70=,tag:eFYF1ISvBbGVRUTxxoeILQ==,type:str]
+    lastmodified: "2025-11-06T12:37:48Z"
+    mac: ENC[AES256_GCM,data:Xi7Y1jNQqbj/Dn1vtUr5k867+rHVR60rX2DwpMx1r+XsIrd+3gh6fC2sIVFbT7H5qHxJTePJLxo6EwGTKlGwiIffTfFZzwUDbcL7bxe6V3yYzDxhrAs+bxBS66EfgJN41jlHJbw9JwsrA6VOQjiXe0u8srXt9nAg8s4Rv2cp4ec=,iv:ty+UcZ/jLTXlvdqPF978cC9Vys5sBsoBe4u8cw1TP4M=,tag:JWAPhpZHjTtvuIaWZo0V9Q==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.10.2

modules/services/tailscale.nix

@@ -1,7 +1,7 @@
 inputs:
 {
   options.nixos.services.tailscale = let inherit (inputs.lib) mkOption types; in mkOption
-    { type = types.nullOr (types.submodule {}); default = null; };
+    { type = types.nullOr (types.submodule {}); default = {}; };
   config = let inherit (inputs.config.nixos.services) tailscale; in inputs.lib.mkIf (tailscale != null)
   {
     services.tailscale =