fix(tailscale): open Tailscale's WireGuard port in the firewall #109

Merged

aaron merged 1 commits from fix/tailscale-open-firewall into main

2026-10-20 12:50:24 +02:00

Author	SHA1	Message	Date
aaronandClaude Opus 5.5	fb3e2864d6	fix(tailscale): open Tailscale's WireGuard port in the firewall services.tailscale.openFirewall defaults to false while the NixOS firewall is enabled, so argon, krypton and neon dropped unsolicited inbound 41641/udp. Direct connections then only succeed if the other peer accepts inbound; between two of these hosts (or a host and a phone) traffic can fall back to a DERP relay. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 12:48:41 +02:00

Author

SHA1

Message

Date

aaronandClaude Opus 5.5

fb3e2864d6

fix(tailscale): open Tailscale's WireGuard port in the firewall

services.tailscale.openFirewall defaults to false while the NixOS
firewall is enabled, so argon, krypton and neon dropped unsolicited
inbound 41641/udp. Direct connections then only succeed if the other
peer accepts inbound; between two of these hosts (or a host and a
phone) traffic can fall back to a DERP relay.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-20 12:48:41 +02:00