nix-config/hosts/vps/modules/services/tailscale.nix
lightly-toasted 89d86413dd feat(vps): enable Tailscale SSH
- Remove port 22 from firewall
- Add --ssh to tailscale up flags
2025-11-18 16:12:17 +09:00

13 lines
278 B
Nix

{ config, pkgs, ... }:
{
sops.secrets."tailscale/authkey" = { };
services.tailscale = {
enable = true;
authKeyFile = config.sops.secrets."tailscale/authkey".path;
useRoutingFeatures = "both";
permitCertUid = "caddy";
extraUpFlags = [ "--ssh" ];
};
}