alarsyo/nixos-config
alarsyo/nixos-config
1
1
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

services: tailscale: loosen firewall policy

Browse source 
See https://github.com/tailscale/tailscale/issues/4432
This commit is contained in:
Antoine Martin 2022-05-15 19:45:42 +02:00
parent df62816288
commit a4d3e6b6f8
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
services/tailscale.nix
View file

@ -28,6 +28,8 @@ in {
networking.firewall = { networking.firewall = {
trustedInterfaces = ["tailscale0"]; trustedInterfaces = ["tailscale0"];
allowedUDPPorts = [config.services.tailscale.port]; allowedUDPPorts = [config.services.tailscale.port];
# needed for exit node usage
checkReversePath = mkIf (!cfg.exitNode) "loose";
}; };
# enable IP forwarding to use as exit node # enable IP forwarding to use as exit node