services: tailscale: move to service

hosts/boreal/default.nix

@@ -32,11 +32,6 @@ in
     };
   };
 
-  services.tailscale = {
-    enable = true;
-    package = pkgs.unstable.tailscale;
-  };
-
   networking.hostName = "boreal"; # Define your hostname.
   networking.domain = "alarsyo.net";
 
@@ -87,6 +82,8 @@ in
 
     pipewire.enable = true;
 
+    tailscale.enable = true;
+
     wireguard = {
       enable = false;
       iface = "wg";

hosts/poseidon/default.nix

@@ -21,11 +21,6 @@ in
 
   boot.supportedFilesystems = [ "btrfs" ];
 
-  boot.kernel.sysctl = {
-    "net.ipv6.conf.all.forwarding" = true;
-    "net.ipv4.ip_forward" = true;
-  };
-
   services.btrfs = {
     autoScrub = {
       enable = true;
@@ -33,18 +28,6 @@ in
     };
   };
 
-  services.tailscale = {
-    enable = true;
-    package = pkgs.unstable.tailscale;
-  };
-  systemd.services.tailscaled = {
-      path = [ pkgs.procps ];
-  };
-  networking.firewall = {
-    trustedInterfaces = [ "tailscale0" ];
-    allowedUDPPorts = [ config.services.tailscale.port ];
-  };
-
   virtualisation.docker = {
     enable = true;
   };
@@ -140,6 +123,8 @@ in
       enable = true;
     };
 
+    tailscale.enable = true;
+
     tgv = {
       enable = true;
     };

services/default.nix

@@ -19,6 +19,7 @@
     ./pipewire.nix
     ./postgresql-backup.nix
     ./postgresql.nix
+    ./tailscale.nix
     ./tgv.nix
     ./transmission.nix
     ./wireguard.nix

services/tailscale.nix

@@ -0,0 +1,35 @@
+{ config, lib, pkgs, ... }:
+
+with lib;
+
+let
+  cfg = config.my.services.tailscale;
+in
+{
+  options.my.services.tailscale = {
+    enable = lib.mkEnableOption "Tailscale";
+  };
+
+  config = mkIf cfg.enable {
+    services.tailscale = {
+      enable = true;
+      package = pkgs.unstable.tailscale;
+    };
+
+    # FIXME: remove when upgrading to 21.11, added to module by default
+    systemd.services.tailscaled = {
+      path = [ pkgs.procps ];
+    };
+
+    networking.firewall = {
+      trustedInterfaces = [ "tailscale0" ];
+      allowedUDPPorts = [ config.services.tailscale.port ];
+    };
+
+    # enable IP forwarding to use as exit node
+    boot.kernel.sysctl = {
+      "net.ipv6.conf.all.forwarding" = true;
+      "net.ipv4.ip_forward" = true;
+    };
+  };
+}