commit 5b7027001795f4f3717256d389e5e920ac389670 · kitten.sh/system

+1 -1

machines/sodacream/configuration.nix

···

       20
       20
        
           fonts.enable = true;

     

       21
       21
        
           server = {

     

       22
       22
        
             enable = true;

     

       23
       23
       -
             sshd.enable = true;

     

       24
       23
        
             tailscale.enable = true;

     

       24
       24
       +
             sshd.enable = false;

     

       25
       25
        
           };

     

       26
       26
        
         };

     

       27
       27

+4 -1

modules/desktop/default.nix

···

       40
       40
        
             };

     

       41
       41
        
             networkmanager = {

     

       42
       42
        
               enable = mkDefault true;

     

       43
       43
       -
               wifi.powersave = true;

     

       43
       43
       +
               wifi = {

     

       44
       44
       +
                 backend = "iwd";

     

       45
       45
       +
                 powersave = true;

     

       46
       46
       +
               };

     

       44
       47
        
             };

     

       45
       48
        
           };

     

       46
       49

+4 -2

modules/server/tailscale.nix

···

       1
       1
       -
       { lib, config, hostname, ... }:

     

       1
       1
       +
       { lib, config, pkgs, user, hostname, ... }:

     

       2
       2
        
       

     

       3
       3
        
       with lib;

     

       4
       4
        
       let

     
···

       34
       34
        
             useRoutingFeatures = if cfgRouter.enable then "server" else "none";

     

       35
       35
        
             extraUpFlags = if cfgRouter.enable

     

       36
       36
        
               then [ "--advertise-exit-node" "--ssh" "--accept-dns=false" ]

     

       37
       37
       -
               else [ "--ssh" "--accept-dns=true" ];

     

       37
       37
       +
               else [ "--ssh" "--accept-dns=true" "--operator=${user}" ];

     

       38
       38
        
             extraDaemonFlags = [ "--no-logs-no-support" ];

     

       39
       39
        
             authKeyFile = "/run/secrets/tailscale";

     

       40
       40
        
           };

     

       41
       41
        
       

     

       42
       42
        
           systemd.services.tailscaled.serviceConfig.Environment = [ "TS_DEBUG_DISABLE_PORTLIST=true" ];

     

       43
       43
       +
       

     

       44
       44
       +
           environment.systemPackages = mkIf config.modules.desktop.enable [ pkgs.tail-tray ];

     

       43
       45
        
         };

     

       44
       46
        
       }