modules.services.tailscale: init

This commit is contained in:
2025-11-06 19:47:56 +08:00
parent 3dfdb36728
commit ee0beeab98
5 changed files with 26 additions and 4 deletions

View File

@@ -0,0 +1,18 @@
inputs:
{
options.nixos.services.tailscale = let inherit (inputs.lib) mkOption types; in mkOption
{ type = types.nullOr (types.submodule {}); default = null; };
config = let inherit (inputs.config.nixos.services) tailscale; in inputs.lib.mkIf (tailscale != null)
{
services.tailscale =
{
enable = true;
openFirewall = true;
disableTaildrop = true;
# authKeyParameters should not be set
authKeyFile = inputs.config.nixos.system.sops.secrets."tailscale".path;
extraUpFlags = [ "--login-server=https://headscale.chn.moe" ];
};
nixos.system.sops.secrets."tailscale" = {};
};
}