setup automatic tailscale connection
This commit is contained in:
parent
bb53626336
commit
75008ffe53
2 changed files with 16 additions and 0 deletions
16
kiosk.nix
16
kiosk.nix
|
@ -35,4 +35,20 @@ in
|
||||||
enable = true;
|
enable = true;
|
||||||
pulse.enable = true;
|
pulse.enable = true;
|
||||||
};
|
};
|
||||||
|
|
||||||
|
services.tailscale = {
|
||||||
|
enable = true;
|
||||||
|
extraUpFlags = [ "--advertise-tags" "tag:kiosk" ];
|
||||||
|
authKeyFile = ./tailscale-client-secret.key;
|
||||||
|
authKeyParameters.ephemeral = false;
|
||||||
|
openFirewall = true;
|
||||||
|
};
|
||||||
|
networking.firewall.trustedInterfaces = [ "tailscale0" ];
|
||||||
|
|
||||||
|
services.openssh = {
|
||||||
|
enable = true;
|
||||||
|
settings = {
|
||||||
|
PermitRootLogin = "yes";
|
||||||
|
};
|
||||||
|
};
|
||||||
}
|
}
|
||||||
|
|
BIN
tailscale-client-secret.key
Normal file
BIN
tailscale-client-secret.key
Normal file
Binary file not shown.
Loading…
Reference in a new issue