lukegb/depot
1
0
Fork 0
Code Issues 1 Pull requests Projects Packages Activity Actions

ops/nixos: allow all traffic in on tailscale0

Browse source
This commit is contained in:
Luke Granger-Brown 2020-11-04 21:53:02 +00:00
parent 46896bc2ed
commit a507a5380d
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
ops/nixos/lib/common.nix
View file

@ -102,6 +102,11 @@ in
programs.mtr.enable = true; programs.mtr.enable = true;
services.openssh.enable = true; services.openssh.enable = true;
services.tailscale.enable = true; services.tailscale.enable = true;
networking.firewall.interfaces.tailscale0 = {
# Just allow anything in on tailscale0.
allowedTCPPortRanges = [{ from = 0; to = 65535; }];
allowedUDPPortRanges = [{ from = 0; to = 65535; }];
};
boot = { boot = {
kernelModules = [ "tcp_bbr" ]; kernelModules = [ "tcp_bbr" ];