From 41b6bf5389b17862c06420adc4ecb762906a3e98 Mon Sep 17 00:00:00 2001
From: Fabian Hauser <fabian@fh2.ch>
Date: Mon, 5 Feb 2024 16:09:12 +0800
Subject: [PATCH] Enable tailscale client

---
 host/ochsenchopf/networking.nix | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/host/ochsenchopf/networking.nix b/host/ochsenchopf/networking.nix
index 69205a5..4facd35 100644
--- a/host/ochsenchopf/networking.nix
+++ b/host/ochsenchopf/networking.nix
@@ -10,4 +10,18 @@
     useDHCP = false;
     hostName = "ochsenchopf";
   };
+
+  services.tailscale = {
+    enable = true;
+    openFirewall = true;
+    useRoutingFeatures = "client";
+    authKeyFile = "/secrets/wireguard/tailscale-key";
+    extraUpFlags = [
+      "--operator"
+      "fhauser"
+      "--accept-routes"
+      "--exit-node=100.64.0.2"
+      "--login-server=https://vpn.qo.is"
+    ];
+  };
 }