tailscale: --accept-dns=false

This commit is contained in:
Motiejus Jakštys 2024-11-21 06:50:25 +02:00
parent bd5acc2690
commit c5192a5256

View File

@ -17,6 +17,10 @@ in
{ {
options.mj.services.tailscale = with types; { options.mj.services.tailscale = with types; {
enable = mkEnableOption "Enable tailscale"; enable = mkEnableOption "Enable tailscale";
acceptDNS = mkOption {
type = bool;
default = false;
};
# https://github.com/tailscale/tailscale/issues/1548 # https://github.com/tailscale/tailscale/issues/1548
verboseLogs = mkOption { verboseLogs = mkOption {
type = bool; type = bool;
@ -28,7 +32,12 @@ in
{ {
services.tailscale = { services.tailscale = {
enable = true; enable = true;
extraUpFlags = [ "--operator=${config.mj.username}" ]; extraUpFlags = [
"--operator=${config.mj.username}"
];
extraDaemonFlags = [
"--accept-dns=${if cfg.acceptDNS then "true" else "false"}"
];
}; };
networking.firewall.checkReversePath = "loose"; networking.firewall.checkReversePath = "loose";
networking.firewall.allowedUDPPorts = [ myData.ports.tailscale ]; networking.firewall.allowedUDPPorts = [ myData.ports.tailscale ];