From 0446221b601f559ce90d2ae6285d11f0689e7f7f Mon Sep 17 00:00:00 2001
From: sinanmohd <sinan@sinanmohd.com>
Date: Fri, 17 Oct 2025 09:56:49 +0530
Subject: feat(cez/tailscale): init

---
 os/cez/modules/headscale.nix | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 os/cez/modules/headscale.nix

(limited to 'os/cez/modules')

diff --git a/os/cez/modules/headscale.nix b/os/cez/modules/headscale.nix
new file mode 100644
index 0000000..1045c24
--- /dev/null
+++ b/os/cez/modules/headscale.nix
@@ -0,0 +1,19 @@
+{ config, ... }:
+let
+  headScaleUrl = "https://headscale.${config.global.userdata.domain}";
+in
+{
+  sops.secrets."misc/headscale" = { };
+  networking.firewall.trustedInterfaces = [ config.services.tailscale.interfaceName ];
+
+  services.tailscale = {
+    enable = true;
+    interfaceName = "headscale";
+    openFirewall = true;
+
+    authKeyFile = config.sops.secrets."misc/headscale".path;
+    extraUpFlags = [
+      "--login-server=${headScaleUrl}"
+    ];
+  };
+}
-- 
cgit v1.2.3