···

       
29
       
29
       
 
       
        { macAddress = "98:ed:7e:c6:57:b2"; ipAddress = "10.0.0.102"; } # eero router

     

       
30
       
30
       
 
       
        { macAddress = "c4:f1:74:51:4c:f2"; ipAddress = "10.0.0.124"; } # eero router

     

       
31
       
31
       
 
       
        { macAddress = "5c:61:99:7a:16:40"; ipAddress = "10.0.0.103"; } # brother printer

     

       
32
       
32
       
-
       
        { macAddress = "24:e8:53:95:e4:02"; ipAddress = "10.0.0.96"; } # tv

     

       
33
       
33
       
-
       
        { macAddress = "34:7e:5c:31:4f:fa"; ipAddress = "10.0.0.56"; } # sonos

     

       
34
       
34
       
-
       
        { macAddress = "e8:9c:25:6c:40:6f"; ipAddress = "10.0.0.150"; } # pepper-pc

     

       
35
       
32
       
 
       
      ];

     

       
36
       
33
       
 
       
      nftables.blockForward = [

     

       
37
       
34
       
 
       
        "ec:e5:12:1d:23:40" # tado

     

···

       
30
       
30
       
 
       


     

       
31
       
31
       
 
       
    services.tailscale = {

     

       
32
       
32
       
 
       
      enable = true;

     

       
33
       
33
       
-
       
      useRoutingFeatures = "server";

     

       
33
       
33
       
+
       
      useRoutingFeatures = "both";

     

       
34
       
34
       
 
       
      extraUpFlags = [ "--advertise-exit-node" "--ssh" "--accept-dns=false" ];

     

       
35
       
35
       
 
       
      extraDaemonFlags = [ "--no-logs-no-support" ];

     

       
36
       
36
       
 
       
      authKeyFile = "/run/secrets/tailscale";