···

       
41
       
 
       
  };

     

       
42
       
 
       


     

       
43
       
 
       
  config = mkIf cfg.enable {

     

       
44
       
-
       
    warnings = optional (firewallOn && rpfIsStrict) "Strict reverse path filtering breaks Tailscale exit node use and some subnet routing setups. Consider setting `networking.firewall.checkReversePath` = 'loose'";

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
45
       
 
       
    environment.systemPackages = [ cfg.package ]; # for the CLI

     

       
46
       
 
       
    systemd.packages = [ cfg.package ];

     

       
47
       
 
       
    systemd.services.tailscaled = {

     

···

       
41
       
 
       
  };

     

       
42
       
 
       


     

       
43
       
 
       
  config = mkIf cfg.enable {

     

       
44
       
+
       
    warnings = optional (firewallOn && rpfIsStrict) ''

     

       
45
       
+
       
      Strict reverse path filtering breaks Tailscale exit node use and some subnet routing setups. Consider setting:

     

       
46
       
+
       


     

       
47
       
+
       
        networking.firewall.checkReversePath = "loose";

     

       
48
       
+
       
    '';

     

       
49
       
 
       
    environment.systemPackages = [ cfg.package ]; # for the CLI

     

       
50
       
 
       
    systemd.packages = [ cfg.package ];

     

       
51
       
 
       
    systemd.services.tailscaled = {