diff options
Diffstat (limited to 'modules/nixosModules/desktop/mullvad.nix')
| -rw-r--r-- | modules/nixosModules/desktop/mullvad.nix | 9 |
1 files changed, 6 insertions, 3 deletions
diff --git a/modules/nixosModules/desktop/mullvad.nix b/modules/nixosModules/desktop/mullvad.nix index 9f2892c..0ac8fb9 100644 --- a/modules/nixosModules/desktop/mullvad.nix +++ b/modules/nixosModules/desktop/mullvad.nix @@ -1,22 +1,25 @@ {lib, ...}: { - flake.nixosModules.mullvad = { pkgs, ... }: { + flake.nixosModules.mullvad = {pkgs, ...}: { services.mullvad-vpn = { enable = true; package = pkgs.mullvad-vpn; enableExcludeWrapper = true; }; + services.resolved.enable = true; + # allow tailscale traffic through + networking.nftables.enable = true; networking.nftables.tables.mullvad_tailscale = { content = '' chain output { - type route hook output priority 0; policy accept; + type route hook output priority -100; policy accept; ip daddr 100.64.0.0/10 ct mark set 0x00000f41 meta mark set 0x6d6f6c65; } ''; family = "inet"; }; - systemd.services.tailscaled.serviceConfig.Environment = [ "TS_DEBUG_FIREWALL_MODE=nftables" ]; + systemd.services.tailscaled.serviceConfig.Environment = ["TS_DEBUG_FIREWALL_MODE=nftables"]; }; } |