summaryrefslogtreecommitdiff
path: root/modules/nixosModules/desktop/tailscale.nix
blob: b070ffac4b92a7e1aa451cdc3f397a5985c9746b (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
{lib, ...}: {
  flake.nixosModules.tailscaleDesktop = {config, ...}: {
    services.tailscale = {
      enable = true;
      useRoutingFeatures = "client";
      openFirewall = true;
      extraUpFlags = ["--accept-dns=false"];
    };

    networking.firewall = {
      enable = lib.mkDefault false;
      trustedInterfaces = ["tailscale0"];
      allowedUDPPorts = [config.services.tailscale.port];
    };
  };

  flake.nixosModules.nasClient = {pkgs, ...}: {
    boot.supportedFilesystems = ["nfs"];

    environment.systemPackages = with pkgs; [nfs-utils];

    fileSystems."/mnt/data" = {
      device = "100.64.0.2:/tank/data";
      fsType = "nfs4";

      options = [
        "x-systemd.automount"
        "noauto"
        "nofail"
        "_netdev"

        "hard"
        "noatime"

        "x-systemd.mount-timeout=10"
        "x-systemd.idle-timeout=600"
      ];
    };

    fileSystems."/mnt/backups" = {
      device = "100.64.0.2:/tank/backups";
      fsType = "nfs4";

      options = [
        "x-systemd.automount"
        "noauto"
        "nofail"
        "_netdev"

        "hard"
        "noatime"

        "x-systemd.mount-timeout=10"
        "x-systemd.idle-timeout=600"
      ];
    };

    fileSystems."/mnt/media" = {
      device = "100.64.0.2:/tank/media";
      fsType = "nfs4";

      options = [
        "x-systemd.automount"
        "noauto"
        "nofail"
        "_netdev"

        "hard"
        "noatime"

        "x-systemd.mount-timeout=10"
        "x-systemd.idle-timeout=600"
      ];
    };
  };
}