MMore stuff

moduler/base.nix

@@ -92,6 +92,13 @@
     enable = true;
   };
 
+  services.tailscale.enable = true;
+  networking.firewall = {
+    checkReversePath = "loose";
+    trustedInterfaces = [ "tailscale0" ];
+    allowedUDPPorts = [ config.services.tailscale.port ];
+  };
+
   services = {
     printing.enable = true;
     clipmenu.enable = true;

moduler/services/headscale/default.nix

@@ -8,11 +8,21 @@ with lib;
   options = {
     headscale = {
       enable = mkEnableOption "enables headscale";
+      port = lib.mkOption {
+        type = lib.types.int;
+        default = 8082;
+        description = "The port that headscale is served on.";
+      };
       domain = lib.mkOption {
         type = lib.types.str;
         default = "headscale.wastring.com";
         description = "The domain that headscale is served on.";
       };
+      baseDomain = lib.mkOption {
+        type = lib.types.str;
+        default = "tailnet.wastring.com";
+        description = "The base-domain that headscale is served on.";
+      };
     };
   };
 
@@ -22,21 +32,25 @@ with lib;
         headscale = {
           enable = true;
           address = "0.0.0.0";
-          port = 8080;
-          server_url = "https://${domain}";
-          dns = {
-            baseDomain = "example.com";
-          };
+          port = config.headscale.port;
           settings = {
+            server_url = "https://${config.headscale.domain}";
             logtail.enabled = false;
+            dns = {
+              base_domain = config.headscale.baseDomain;
+			  nameservers.global = [
+			  	"1.1.1.1"
+			  	"8.8.8.8"
+			  ];
+            };
           };
         };
 
-        nginx.virtualHosts.${domain} = {
+        nginx.virtualHosts.${config.headscale.domain} = {
           forceSSL = true;
           enableACME = true;
           locations."/" = {
-            proxyPass = "http://localhost:${toString config.services.headscale.port}";
+            proxyPass = "http://localhost:${toString config.headscale.port}";
             proxyWebsockets = true;
           };
         };