all repos — nixfiles @ 0ae11f1e6bf13594639212cdb9e0a95c991ee0e0

System and user configuration, managed by nix and home-manager

router: force dnsmasq, resolved and tailscale to coexist

Alin
commit

0ae11f1e6bf13594639212cdb9e0a95c991ee0e0

parent

120594fc6aace31e9574ebe03478d84d7e14c910

1 file changed, 19 insertions(+), 2 deletions(-)

changed files
M system/settings/services/tailscale.nix → system/settings/services/tailscale.nix
@@ -1,7 +1,15 @@
-{ ... }:
+{
+  config,
+  lib,
+  ...
+}:
+let
+  tailnet = "fin-marlin.ts.net";
+  magicDNSv6 = "fd7a:115c:a1e0::53";
+in
 {
   networking.hosts = {
-    "fd7a:115c:a1e0::53" = [
+    "${magicDNSv6}" = [
       "tailscale"
       "ts"
     ];

@@ -12,6 +20,15 @@ enable = true;
     openFirewall = true;
     extraSetFlags = [
       "--accept-routes"
+    ];
+  };
+
+  services.resolved.dnsDelegates.tailscale.Delegate = {
+    DNS = [ magicDNSv6 ];
+    Domains = [
+      tailnet
+      "~ts.net"
+      "~0.e.1.a.c.5.1.1.a.7.d.f.ip6.arpa"
     ];
   };