Franz Kafka
1c28db5f8e
New module: modules/headscale.nix - Headscale service listening on localhost with Nginx reverse proxy - SQLite database (appropriate for personal use) - Tailscale public DERP relays for NAT traversal fallback - MagicDNS enabled with Mullvad/Quad9 upstream resolvers - Optional OIDC authentication (Google, GitHub, etc.) - Default auth: pre-shared API keys (headscale apikeys create) - Added to backup paths (SQLite DB) - headscale CLI tool added to system packages Configuration: - Domain: vpn.ashisgreat.xyz - OIDC disabled by default (documented how to enable in configuration.nix) To register a device after deploying: sudo headscale apikeys create tailscale up --login-server=https://vpn.ashisgreat.xyz --authkey=<key> DNS record needed: vpn.ashisgreat.xyz → VPS IP
16 lines
248 B
Nix
16 lines
248 B
Nix
# Module exports
|
|
{
|
|
imports = [
|
|
./system.nix
|
|
./podman.nix
|
|
./nginx.nix
|
|
./searxng.nix
|
|
./openclaw-podman.nix
|
|
./vaultwarden.nix
|
|
./crowdsec.nix
|
|
./backup.nix
|
|
./adguard.nix
|
|
./forgejo.nix
|
|
./headscale.nix
|
|
];
|
|
}
|