Configure tailscale exit node

wagdav · Jun 1, 2024 · e9c7b57 · e9c7b57
1 parent 26394b7
commit e9c7b57
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 4 deletions.
diff --git a/host-nuc.nix b/host-nuc.nix
@@ -19,5 +19,10 @@
     ./modules/webhook.nix
   ];
 
+  services.tailscale = {
+    useRoutingFeatures = "server";
+    extraUpFlags = "--advertise-exit-node";
+  };
+
   system.stateVersion = "22.05";
 }
diff --git a/modules/vpn.nix b/modules/vpn.nix
@@ -2,9 +2,5 @@
 
 {
   services.tailscale.enable = true;
-
-  # Strict reverse path filtering breaks Tailscale exit node use and some
-  # subnet routing setups.
-  networking.firewall.checkReversePath = "loose";
 }
 
diff --git a/x230.nix b/x230.nix
@@ -147,6 +147,8 @@
 
     printing.enable = true;
 
+    tailscale.useRoutingFeatures = "client";
+
     greetd = {
       enable = true;
       settings = {