Commit Graph
6 Commits
Author SHA1 Message Date
aaronandClaude Opus 5.5 fb3e2864d6 fix(tailscale): open Tailscale's WireGuard port in the firewall
services.tailscale.openFirewall defaults to false while the NixOS
firewall is enabled, so argon, krypton and neon dropped unsolicited
inbound 41641/udp. Direct connections then only succeed if the other
peer accepts inbound; between two of these hosts (or a host and a
phone) traffic can fall back to a DERP relay.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-20 12:48:41 +02:00
aaron 4ec579b1fc chore(lint): add statix config and remove unused arguments 2026-10-01 11:40:03 +02:00
aaron 98617c4099 feature(vpn): enable tailscaled on the system at startup 2026-01-16 20:22:48 +01:00
aaron 2cb495848f feature(fwupd): install and enable fwupd for firmware upgrades 2026-01-09 21:12:55 +01:00
aaron f3678a13c5 feature(services): add services to module files 2025-12-28 19:27:14 +01:00
aaron 9cde74486a feature(serivces): add services module that handles various enabled services 2025-12-28 18:48:11 +01:00