commit 746862a57fcfba00275facd5961fcf775d79c2e5 · kitten.sh/system

-3

machines/ramune/configuration.nix

···

       29
        
               { macAddress = "98:ed:7e:c6:57:b2"; ipAddress = "10.0.0.102"; } # eero router

     

       30
        
               { macAddress = "c4:f1:74:51:4c:f2"; ipAddress = "10.0.0.124"; } # eero router

     

       31
        
               { macAddress = "5c:61:99:7a:16:40"; ipAddress = "10.0.0.103"; } # brother printer

     

       32
       -
               { macAddress = "24:e8:53:95:e4:02"; ipAddress = "10.0.0.96"; } # tv

     

       33
       -
               { macAddress = "34:7e:5c:31:4f:fa"; ipAddress = "10.0.0.56"; } # sonos

     

       34
       -
               { macAddress = "e8:9c:25:6c:40:6f"; ipAddress = "10.0.0.150"; } # pepper-pc

     

       35
        
             ];

     

       36
        
             nftables.blockForward = [

     

       37
        
               "ec:e5:12:1d:23:40" # tado

···

       29
        
               { macAddress = "98:ed:7e:c6:57:b2"; ipAddress = "10.0.0.102"; } # eero router

     

       30
        
               { macAddress = "c4:f1:74:51:4c:f2"; ipAddress = "10.0.0.124"; } # eero router

     

       31
        
               { macAddress = "5c:61:99:7a:16:40"; ipAddress = "10.0.0.103"; } # brother printer

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       32
        
             ];

     

       33
        
             nftables.blockForward = [

     

       34
        
               "ec:e5:12:1d:23:40" # tado

+1 -1

modules/server/tailscale.nix

···

       30
        
       

     

       31
        
           services.tailscale = {

     

       32
        
             enable = true;

     

       33
       -
             useRoutingFeatures = "server";

     

       34
        
             extraUpFlags = [ "--advertise-exit-node" "--ssh" "--accept-dns=false" ];

     

       35
        
             extraDaemonFlags = [ "--no-logs-no-support" ];

     

       36
        
             authKeyFile = "/run/secrets/tailscale";

···

       30
        
       

     

       31
        
           services.tailscale = {

     

       32
        
             enable = true;

     

       33
       +
             useRoutingFeatures = "both";

     

       34
        
             extraUpFlags = [ "--advertise-exit-node" "--ssh" "--accept-dns=false" ];

     

       35
        
             extraDaemonFlags = [ "--no-logs-no-support" ];

     

       36
        
             authKeyFile = "/run/secrets/tailscale";