about summary refs log tree commit diff
path: root/ops
diff options
context:
space:
mode:
authorVincent Ambo <tazjin@google.com>2020-02-11T16·27+0000
committerVincent Ambo <tazjin@google.com>2020-02-11T16·27+0000
commit44b57d095ba424df49e7a64f0dd9eba877d62386 (patch)
tree23d929ea8e6979cac62c15e548311f1a6d3ad039 /ops
parentaaa0119a375f7401f757dec8b058f53999115899 (diff)
feat(ops/nixos/camden): Join camden.tazj.in into Tailscale mesh r/536
Diffstat (limited to 'ops')
-rw-r--r--ops/nixos/camden/default.nix24
1 files changed, 21 insertions, 3 deletions
diff --git a/ops/nixos/camden/default.nix b/ops/nixos/camden/default.nix
index 9a960600db4d..d1d601ecb000 100644
--- a/ops/nixos/camden/default.nix
+++ b/ops/nixos/camden/default.nix
@@ -7,6 +7,8 @@ config: let
     config.allowUnfree = true;
   };
 in pkgs.lib.fix(self: {
+  imports = [ ../modules/tailscale.nix ];
+
   # camden is intended to boot unattended, despite having an encrypted
   # root partition.
   #
@@ -72,9 +74,17 @@ in pkgs.lib.fix(self: {
 
   # System-wide application setup
   programs.fish.enable = true;
-  environment.systemPackages = with nixpkgs; [
-    curl emacs26-nox git gnupg pass pciutils
-  ];
+  environment.systemPackages =
+    # programs from the depot
+    (with pkgs; [
+      third_party.git
+      third_party.tailscale
+    ]) ++
+
+    # programs from nixpkgs
+    (with nixpkgs; [
+      curl emacs26-nox gnupg pass pciutils direnv
+    ]);
 
   # Services setup
   services.openssh.enable = true;
@@ -86,5 +96,13 @@ in pkgs.lib.fix(self: {
     shell = nixpkgs.fish;
   };
 
+  # Join Tailscale into home network
+  services.tailscale = {
+    enable = true;
+    relayConf = "/etc/tailscale.conf";
+    aclFile = null; # allow all traffic for testing
+    package = pkgs.third_party.tailscale;
+  };
+
   system.stateVersion = "19.09";
 })