don/NixOS-Configs
1
0
Fork 0
Code Issues Pull requests Projects Releases 1 Activity

hosts/pi-server | re-enable tailscale

Browse source
This commit is contained in:
Don Harper 2025-12-02 15:51:40 -06:00
parent 7e42c835c7
commit a75a667c52
1 changed files with 16 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

17
hosts/pi-server/default.nix
View file

@ -74,6 +74,7 @@
services = { services = {
beszel-agent = {enable = true;}; beszel-agent = {enable = true;};
nscd = {enableNsncd = true;}; nscd = {enableNsncd = true;};
tailscale = {enable = true;};
locate = { locate = {
enable = true; enable = true;
package = pkgs.mlocate; package = pkgs.mlocate;
@ -119,7 +120,7 @@
}; };
zramSwap = { zramSwap = {
enable = true; enable = false;
memoryPercent = 25; memoryPercent = 25;
memoryMax = 2147483648; memoryMax = 2147483648;
}; };
@ -152,7 +153,21 @@
# Open ports in the firewall. # Open ports in the firewall.
networking.firewall = { networking.firewall = {
enable = true; enable = true;
trustedInterfaces = ["tailscale0"];
checkReversePath = "loose"; checkReversePath = "loose";
allowedUDPPorts = [config.services.tailscale.port];
allowedTCPPortRanges = [
{
from = 1714;
to = 1764;
}
];
allowedUDPPortRanges = [
{
from = 1714;
to = 1764;
}
];
allowedTCPPorts = [22]; allowedTCPPorts = [22];
}; };