randogoth/nanuqsaurus
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
No description
120 commits 1 branch 0 tags 173 KiB
Find a file
randogoth 1565c4cb5c networking: loose reverse-path filtering for tailscale exit nodes 
Strict RPF (NixOS default) drops the encrypted return traffic of an active
exit node: table 52's 'default dev tailscale0' makes the reverse-path lookup
for packets arriving on the physical interface resolve to tailscale0, so they
are dropped before Tailscale decrypts them (rx stays 0). Loose RPF still blocks
spoofed/unroutable sources but removes the interface-match requirement, as
recommended by Tailscale/NixOS for exit nodes and subnet routers.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-21 19:30:08 +02:00
docs feat: make flox opt-in 2026-02-05 09:05:10 +02:00
hosts impernanence optional 2026-02-10 09:34:51 +02:00
modules networking: loose reverse-path filtering for tailscale exit nodes 2026-07-21 19:30:08 +02:00
scripts fix(shell): let bash-preexec install last so atuin preexec fires 2026-07-11 16:13:30 +03:00
templates NUR integration 2026-02-12 07:39:10 +02:00
.gitignore Keep local host/hardware files, default hostname nanuqsaurus 2026-02-01 22:14:04 +02:00
AGENTS.md uppercase 2026-02-10 08:28:11 +02:00
agents.md added permission directive 2026-02-05 07:40:52 +02:00
flake.lock NUR integration 2026-02-12 07:39:10 +02:00
flake.nix NUR integration 2026-02-12 07:39:10 +02:00
impermanence.md impernanence optional 2026-02-10 09:34:51 +02:00
README.md refactor: make nanuqsaurus module-based; keep btrfs install profile 2026-02-04 20:53:05 +02:00

README.md

under heavy development

Adopt on an existing NixOS install (recommended)

Use a small local wrapper flake that imports this repo’s profile module and keeps your machine’s hardware-configuration.nix for mounts/boot:

  • docs/adopt.md

Fresh install (wipes disk, uses disko)

sudo nix --experimental-features "nix-command flakes" \
  run github:nix-community/disko/latest#disko-install -- \
  --mode format \
  --flake "git+https://codeberg.org/randogoth/nanuqsaurus.git#nanuqsaurus-btrfs" \
  --disk main /dev/disk/by-id/<your-disk> \
  --mount-point /mnt