tailscale

modules/system/networking.nix

@@ -1,5 +1,14 @@
 { lib, ... }:
 
 {
-  networking.useDHCP = lib.mkDefault true;
+  networking = {
+    useDHCP = lib.mkDefault true;
+    nftables.enable = true;
+    firewall = {
+      enable = true;
+      trustedInterfaces = [ "tailscale0" ];
+      allowedUDPPorts = [ config.services.tailscale.port ];
+    };
+  systemd.network.wait-online.enable = false;
+  boot.initrd.systemd.network.wait-online.enable = false;
 }

modules/system/packages.nix

@@ -9,6 +9,7 @@
     pkgs.distrobox
     pkgs.distroshelf
     pkgs.dnsmasq
+    pkgs.ethtool
     pkgs.fastfetch
     pkgs.flatpak
     pkgs.git

modules/system/services.nix

@@ -15,5 +15,9 @@
       pulse.enable = true;
       jack.enable = true;
     };
+    tailscale.enable = true;
+    tailscaled.serviceConfig.Environment = [ 
+      "TS_DEBUG_FIREWALL_MODE=nftables" 
+    ];
   };
 }