qo.is/infrastructure
3
0
Fork 0
Code Issues 12 Pull requests Projects 1 Activity Actions

Extract vpn exit node config to module

Browse source
This commit is contained in:
Fabian Hauser 2024-12-11 13:11:42 +02:00
parent aaebb4bc19
commit 3f2d427c65
7 changed files with 57 additions and 39 deletions
Download patch file Download diff file Expand all files Collapse all files

19
nixos-configurations/lindberg/networking.nix
View file

@ -38,7 +38,7 @@ in
in
{
enable = true;
resolveLocalQueries = false;
resolveLocalQueries = true;
settings = {
interface = "vms-nat";
bind-interfaces = true;
@ -74,20 +74,5 @@ in
qois.backplane-net.enable = true;
# Use this node as vpn exit node
qois.backup-client.includePaths = [ "/var/lib/tailscale" ];
services.tailscale = {
enable = true;
openFirewall = true;
useRoutingFeatures = "server";
authKeyFile = config.sops.secrets."tailscale/key".path;
extraUpFlags = [
"--login-server=https://vpn.qo.is"
"--advertise-exit-node"
(
with meta.network.virtual.backplane.v4; "--advertise-routes=${id}/${builtins.toString prefixLength}"
)
"--advertise-tags=tag:srv"
];
};
qois.vpn-exit-node.enable = true;
}