tailscale: --accept-dns=false
This commit is contained in:
parent
bd5acc2690
commit
c5192a5256
@ -17,6 +17,10 @@ in
|
|||||||
{
|
{
|
||||||
options.mj.services.tailscale = with types; {
|
options.mj.services.tailscale = with types; {
|
||||||
enable = mkEnableOption "Enable tailscale";
|
enable = mkEnableOption "Enable tailscale";
|
||||||
|
acceptDNS = mkOption {
|
||||||
|
type = bool;
|
||||||
|
default = false;
|
||||||
|
};
|
||||||
# https://github.com/tailscale/tailscale/issues/1548
|
# https://github.com/tailscale/tailscale/issues/1548
|
||||||
verboseLogs = mkOption {
|
verboseLogs = mkOption {
|
||||||
type = bool;
|
type = bool;
|
||||||
@ -28,7 +32,12 @@ in
|
|||||||
{
|
{
|
||||||
services.tailscale = {
|
services.tailscale = {
|
||||||
enable = true;
|
enable = true;
|
||||||
extraUpFlags = [ "--operator=${config.mj.username}" ];
|
extraUpFlags = [
|
||||||
|
"--operator=${config.mj.username}"
|
||||||
|
];
|
||||||
|
extraDaemonFlags = [
|
||||||
|
"--accept-dns=${if cfg.acceptDNS then "true" else "false"}"
|
||||||
|
];
|
||||||
};
|
};
|
||||||
networking.firewall.checkReversePath = "loose";
|
networking.firewall.checkReversePath = "loose";
|
||||||
networking.firewall.allowedUDPPorts = [ myData.ports.tailscale ];
|
networking.firewall.allowedUDPPorts = [ myData.ports.tailscale ];
|
||||||
|
Loading…
Reference in New Issue
Block a user