Switch to tailscale for inner infra network

This commit is contained in:
Filippo Berto 2024-02-07 12:18:20 +01:00
parent 1427c784c0
commit 89f84345c1
Signed by: bertof
GPG key ID: 9DBF7E6A1D2CE9ED
6 changed files with 41 additions and 42 deletions

View file

@ -1,10 +1,9 @@
{ lib, ... }:
let
src = ./.;
files = builtins.readDir src;
nixFiles = builtins.attrNames (lib.attrsets.filterAttrs (name: type: type != "directory" && lib.hasSuffix ".nix" name && !(lib.hasSuffix "default.nix" name)) files);
imports = builtins.map (path: src + ("/" + path)) nixFiles;
in
{
inherit imports;
imports = [
# ./zerotier.nix
./tailscale.nix
./distributed.nix
./remote-deploy.nix
./extended-registry.nix
];
}

View file

@ -40,14 +40,14 @@ in
config = {
trustedProxies = [
hosts.zerotier.ipv4."baldur.zto"
hosts.zerotier.ipv6."baldur.zto"
# hosts.zerotier.ipv4."baldur.zto"
# hosts.zerotier.ipv6."baldur.zto"
hosts.tailscale.ipv4."baldur.tsn"
hosts.tailscale.ipv6."baldur.tsn"
"baldur.zto"
# "baldur.zto"
"baldur.tsn"
];
extraTrustedDomains = [ config.services.nextcloud.hostName "freya.zto" ];
# extraTrustedDomains = [ config.services.nextcloud.hostName "freya.tsn" ];
adminpassFile = config.age.secrets.nextcloud_admin_secret.path;
overwriteProtocol = "https";
# objectstore.s3 = {