config/modules/services/tailscale/default.nix

30 lines
712 B
Nix

{
config,
lib,
myData,
...
}: let
cfg = config.mj.services.tailscale;
inherit (lib) mkMerge types mkEnableOption mkOption mkIf;
in {
options.mj.services.tailscale = with types; {
enable = mkEnableOption "Enable tailscale";
# https://github.com/tailscale/tailscale/issues/1548
silenceLogs = mkOption {
type = bool;
default = false;
};
};
config = mkIf cfg.enable (mkMerge [
{
services.tailscale.enable = true;
networking.firewall.checkReversePath = "loose";
networking.firewall.allowedUDPPorts = [myData.ports.tailscale];
}
(mkIf cfg.silenceLogs {
systemd.services.tailscaled.serviceConfig.StandardOutput = "null";
})
]);
}