aaronandClaude Opus 5.5 fb3e2864d6 fix(tailscale): open Tailscale's WireGuard port in the firewall
services.tailscale.openFirewall defaults to false while the NixOS
firewall is enabled, so argon, krypton and neon dropped unsolicited
inbound 41641/udp. Direct connections then only succeed if the other
peer accepts inbound; between two of these hosts (or a host and a
phone) traffic can fall back to a DERP relay.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-20 12:48:41 +02:00
2026-10-02 08:23:28 +02:00
2026-10-12 18:10:15 +02:00

NixOS config

My personal NixOS configurations.

config structure

.
├── flake.nix # hosts and home-manager wiring
├── hosts
│   ├── argon # desktop
│   ├── neon # laptop
│   └── krypton # second laptop
│       ├── configuration.nix # host-specific settings and module imports
│       ├── hardware-configuration.nix # generated by nixos-generate-config
│       └── niri.nix # host-specific niri settings (outputs, input)
├── modules
│   ├── home-manager # user modules, imported by users/aaron/home.nix
│   └── nixos # system modules, imported by the hosts
└── users
    └── aaron
        └── home.nix # imports home-manager modules

installation

For more details about the installation procedure see: INSTALLATION.md

author

aaron aaron@0x29a.ch

S
Description
My personal NixOS configuration files for all of my machines
Readme
855 KiB
Languages
Nix 100%