pi-server | format, add vars.nix, remove tailscale0 overrides

This commit is contained in:
Don Harper 2025-08-08 18:58:04 -05:00
parent b20d6c36c1
commit 257cd20a5e

View file

@ -1,5 +1,11 @@
{ inputs, outputs, lib, config, pkgs, ... }:
let
{
inputs,
outputs,
lib,
config,
pkgs,
...
}: let
my-python-packages = python-packages:
with python-packages; [
pip
@ -26,7 +32,7 @@ in {
imports = [
../../home
./systemd.nix
./tailscale.nix
../vars.nix
./upgrade-diff.nix
../../modules/beszel-agent.nix
];
@ -74,11 +80,13 @@ in {
sudo.enable = false;
doas = {
enable = true;
extraRules = [{
extraRules = [
{
users = ["don"];
keepEnv = true;
noPass = true;
}];
}
];
};
};
@ -202,30 +210,21 @@ in {
# allow the Tailscale UDP port through the firewall
allowedUDPPorts = [config.services.tailscale.port];
allowedTCPPortRanges = [{
allowedTCPPortRanges = [
{
from = 1714;
to = 1764;
}];
allowedUDPPortRanges = [{
}
];
allowedUDPPortRanges = [
{
from = 1714;
to = 1764;
}];
}
];
# allow you to SSH in over the public internet
allowedTCPPorts = [22];
interfaces = {
"tailscale0" = {
allowedTCPPorts = [ 22 8080 8443 ];
allowedTCPPortRanges = [{
from = 1714;
to = 1764;
}];
allowedUDPPortRanges = [{
from = 1714;
to = 1764;
}];
};
};
};
# This value determines the NixOS release from which the default