lkasjdlakjsdlaskjd

This commit is contained in:
2025-11-07 14:56:40 +01:00
parent d688b7d253
commit 1c0740dcb1
4 changed files with 8 additions and 11 deletions

View File

@@ -28,7 +28,7 @@ let
];
# me!
# "cache-proxy.pbsds.net" = [ ];
# "https://cache-proxy.pbsds.net/?priority=35" = [ ];
};
in

View File

@@ -8,12 +8,10 @@
# https://tailscale.com/kb/1085/auth-keys
services.tailscale.authKeyFile = config.sops.secrets.tailscale-authkey-inner.path; # also enables autoconnect
sops.secrets.tailscale-authkey-inner.sopsFile = ../secrets/tailscale-inner.yaml;
sops.secrets.tailscale-authkey-inner.sopsFile = ../../secrets/tailscale-inner.yaml;
# systemd-resolved will by default read /etc/hosts
networking.extraHosts = [
# "100.113.27.44 cache-proxy.pbsds.net" # noximilien over tailscale
];
# # systemd-resolved will by default read /etc/hosts
# networking.extraHosts = "100.113.27.44 cache-proxy.pbsds.net"; # noximilien over tailscale
};
}

View File

@@ -8,7 +8,7 @@
# https://tailscale.com/kb/1085/auth-keys
services.tailscale.authKeyFile = config.sops.secrets.tailscale-authkey-outer.path; # also enables autoconnect
sops.secrets.tailscale-authkey-outer.sopsFile = ../secrets/tailscale-outer.yaml;
sops.secrets.tailscale-authkey-outer.sopsFile = ../../secrets/tailscale-outer.yaml;
};
}

View File

@@ -19,13 +19,12 @@ in
services.tailscale.enable = true;
networking.extraHosts = [
"127.0.0.2 ${config.pbsds.tailscale.fqdn}" # the entire 127.0.0.0/8 is loopback
];
# the entire 127.0.0.0/8 is loopback, this matches nixos behavior for fqdn
networking.extraHosts = "127.0.0.2 ${config.pbsds.tailscale.fqdn}";
# # https://tailscale.com/kb/1085/auth-keys
# services.tailscale.authKeyFile = config.sops.secrets.tailscale-authkey-inner.path; # also enables autoconnect
# sops.secrets.tailscale-authkey-inner.sopsFile = ../secrets/tailscale-inner.yaml;
# sops.secrets.tailscale-authkey-inner.sopsFile = ../../secrets/tailscale-inner.yaml;
# https://wiki.nixos.org/wiki/Tailscale#DNS
services.resolved.enable = lib.mkDefault config.networking.networkmanager.enable;