tailscale: silence logs on some machines

modules/base/default.nix

@@ -154,7 +154,6 @@
     };
 
     networking.firewall.logRefusedConnections = false;
-    networking.firewall.checkReversePath = "loose"; # for tailscale
 
     services = {
       chrony = {

modules/services/default.nix

@@ -1,7 +1,7 @@
 {
   config,
-  lib,
-  pkgs,
+lib,
+pkgs,
   ...
 }: {
   imports = [
@@ -18,6 +18,7 @@
     ./snmp_exporter
     ./sshguard
     ./syncthing
+    ./tailscale
     ./zfsunlock
   ];
 }

modules/services/tailscale/default.nix

@@ -0,0 +1,25 @@
+{
+  config,
+  lib,
+  pkgs,
+  myData,
+  ...
+}: {
+  options.mj.services.tailscale = with lib.types; {
+    enable = lib.mkEnableOption "Enable tailscale";
+    # https://github.com/tailscale/tailscale/issues/1548
+    silenceLogs = lib.mkOption {
+      type = bool;
+      default = false;
+    };
+  };
+
+  config = with config.mj.services.tailscale;
+    lib.mkIf enable {
+      services.tailscale.enable = true;
+      networking.firewall.checkReversePath = "loose"; # for tailscale
+    }
+    // lib.mkIf silenceLogs {
+      systemd.services.tailscale.serviceConfig."StandardOutput" = "null";
+    };
+}