summaryrefslogtreecommitdiff
path: root/modules/nixosModules/desktop/mullvad.nix
diff options
context:
space:
mode:
authorscouckel <james.krinsky@gmail.com>2026-04-05 20:57:53 -0400
committerscouckel <james.krinsky@gmail.com>2026-04-05 20:57:53 -0400
commitdd42457fd66328d1ac850498bba865c721db6075 (patch)
tree01b1d9fbe4d6f90aa3f9fcea05f3962001cb9562 /modules/nixosModules/desktop/mullvad.nix
parent9a58c5f1857549f17e98adc9e385e4c4fb20d53a (diff)
merge things idk
Diffstat (limited to 'modules/nixosModules/desktop/mullvad.nix')
-rw-r--r--modules/nixosModules/desktop/mullvad.nix9
1 files changed, 6 insertions, 3 deletions
diff --git a/modules/nixosModules/desktop/mullvad.nix b/modules/nixosModules/desktop/mullvad.nix
index 9f2892c..0ac8fb9 100644
--- a/modules/nixosModules/desktop/mullvad.nix
+++ b/modules/nixosModules/desktop/mullvad.nix
@@ -1,22 +1,25 @@
{lib, ...}: {
- flake.nixosModules.mullvad = { pkgs, ... }: {
+ flake.nixosModules.mullvad = {pkgs, ...}: {
services.mullvad-vpn = {
enable = true;
package = pkgs.mullvad-vpn;
enableExcludeWrapper = true;
};
+ services.resolved.enable = true;
+
# allow tailscale traffic through
+ networking.nftables.enable = true;
networking.nftables.tables.mullvad_tailscale = {
content = ''
chain output {
- type route hook output priority 0; policy accept;
+ type route hook output priority -100; policy accept;
ip daddr 100.64.0.0/10 ct mark set 0x00000f41 meta mark set 0x6d6f6c65;
}
'';
family = "inet";
};
- systemd.services.tailscaled.serviceConfig.Environment = [ "TS_DEBUG_FIREWALL_MODE=nftables" ];
+ systemd.services.tailscaled.serviceConfig.Environment = ["TS_DEBUG_FIREWALL_MODE=nftables"];
};
}