|
|
|
@ -6,6 +6,7 @@ let |
|
|
|
|
cfg = config.services.tailscale; |
|
|
|
|
firewallOn = config.networking.firewall.enable; |
|
|
|
|
rpfMode = config.networking.firewall.checkReversePath; |
|
|
|
|
isNetworkd = config.networking.useNetworkd; |
|
|
|
|
rpfIsStrict = rpfMode == true || rpfMode == "strict"; |
|
|
|
|
in { |
|
|
|
|
meta.maintainers = with maintainers; [ danderson mbaillie twitchyliquid64 ]; |
|
|
|
@ -69,5 +70,17 @@ in { |
|
|
|
|
# linux distros. |
|
|
|
|
stopIfChanged = false; |
|
|
|
|
}; |
|
|
|
|
|
|
|
|
|
networking.dhcpcd.denyInterfaces = [ cfg.interfaceName ]; |
|
|
|
|
|
|
|
|
|
systemd.network.networks."50-tailscale" = mkIf isNetworkd { |
|
|
|
|
matchConfig = { |
|
|
|
|
Name = cfg.interfaceName; |
|
|
|
|
}; |
|
|
|
|
linkConfig = { |
|
|
|
|
Unmanaged = true; |
|
|
|
|
ActivationPolicy = "manual"; |
|
|
|
|
}; |
|
|
|
|
}; |
|
|
|
|
}; |
|
|
|
|
} |
|
|
|
|