more tower migration stuff, prepare for cgit-public migration

1 files changed, 11 insertions, 1 deletions

diff --git a/hosts/tower/network.nix b/hosts/tower/network.nix
index fc0fdc5..09a97a3 100644
--- a/hosts/tower/network.nix
+++ b/hosts/tower/network.nix
@@ -1,7 +1,17 @@
-{ ... }:
+{ config, ... }:
 {
   networking = {
     hostName = "tower";
     networkmanager.enable = true;
+    firewall = {
+      checkReversePath = "loose";
+      trustedInterfaces = [ "tailscale0" ];
+      allowedUDPPorts = [ config.services.tailscale.port ];
+    };
+  };
+
+  services.tailscale = {
+    enable = true;
+    openFirewall = true;
   };
 }