From a763c85e3deda6993a8be04a9565071ad8fc9ff7 Mon Sep 17 00:00:00 2001
From: Luke Granger-Brown <hg@lukegb.com>
Date: Sat, 13 Mar 2021 20:58:43 +0000
Subject: [PATCH] blade: allow tailscale 41641/udp

---
 ops/nixos/lib/blade.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/ops/nixos/lib/blade.nix b/ops/nixos/lib/blade.nix
index bdbd76ec11..d0fad8b8c6 100644
--- a/ops/nixos/lib/blade.nix
+++ b/ops/nixos/lib/blade.nix
@@ -78,6 +78,9 @@ in {
   
       defaultGateway = lib.mkDefault "10.100.0.1";
   
+      firewall.allowedUDPPorts = [
+        41641 # Tailscale
+      ];
       firewall.allowedTCPPorts = lib.mkIf config.services.ceph.enable [ 6789 3300 ];
       firewall.allowedTCPPortRanges = lib.mkIf config.services.ceph.enable [{ from = 6800; to = 7300; }];