all repos — nixfiles @ d02e3c84d9e274f4e7e31085ac8ae0ef35282c02

System and user configuration, managed by nix and home-manager

make tailscale exit node opt-in

Alin
commit

d02e3c84d9e274f4e7e31085ac8ae0ef35282c02

parent

833cd544e07167ffddbbfe909a17913efcd75674

4 files changed, 10 insertions(+), 7 deletions(-)

changed files
M system/hosts/r5.nix → system/hosts/r5.nix
@@ -16,6 +16,7 @@ ../roles/server.nix
     ../roles/router.nix
     ../roles/local-ca.nix
     ../roles/dynamic-dns.nix
+    ../roles/exit-node.nix
     ../roles/tailscale-subnet-router.nix
     ../settings/hardware/usb-serial-tty.nix
   ];
M system/hosts/smrk.nix → system/hosts/smrk.nix
@@ -16,6 +16,7 @@ ../roles/auth-dns.nix
     ../roles/binary-cache.nix
     ../roles/calendar-anonymiser.nix
     ../roles/ci.nix
+    ../roles/exit-node.nix
     ../roles/file-server.nix
     ../roles/go-vanity.nix
     ../roles/goatcounter.nix
A system/roles/exit-node.nix
@@ -0,0 +1,8 @@
+{
+  services.tailscale = {
+    useRoutingFeatures = "both";
+    extraSetFlags = [
+      "--advertise-exit-node"
+    ];
+  };
+}
M system/roles/server.nix → system/roles/server.nix
@@ -25,13 +25,6 @@ ];
 
   srvos.server.docs.enable = true;
 
-  services.tailscale = {
-    useRoutingFeatures = "both";
-    extraSetFlags = [
-      "--advertise-exit-node"
-    ];
-  };
-
   services.sshguard = {
     enable = true;
   };