From 0f9a6273caca38e6e0ea9d47442581fffab40c8a Mon Sep 17 00:00:00 2001
From: Isabella Bastaja <isabella@sorre.xyz>
Date: Mon, 3 Aug 2026 00:17:58 +0200
Subject: sagittarius: set up headscale

---
 hosts/sagittarius/default.nix   |  1 +
 hosts/sagittarius/headscale.nix | 28 ++++++++++++++++++++++++++++
 2 files changed, 29 insertions(+)
 create mode 100644 hosts/sagittarius/headscale.nix

(limited to 'hosts')

diff --git a/hosts/sagittarius/default.nix b/hosts/sagittarius/default.nix
index b9d7683..e55bb3e 100644
--- a/hosts/sagittarius/default.nix
+++ b/hosts/sagittarius/default.nix
@@ -11,6 +11,7 @@
     ./web
     ./sops.nix
     ./network.nix
+    ./headscale.nix
   ];
 
   boot.loader.grub.device = "/dev/sda";
diff --git a/hosts/sagittarius/headscale.nix b/hosts/sagittarius/headscale.nix
new file mode 100644
index 0000000..4a261c2
--- /dev/null
+++ b/hosts/sagittarius/headscale.nix
@@ -0,0 +1,28 @@
+{ config, ... }:
+let
+  domain = "headscale.sorre.xyz";
+  port = 5892;
+in
+{
+  services.headscale = {
+    enable = true;
+    inherit port;
+    address = "127.0.0.1";
+    settings = {
+      server_url = "https://${domain}";
+      dns.base_domain = "sorre.internal";
+      dns.nameservers.global = [ "1.1.1.1" "2301:db8:acad:a::1" ];
+    };
+  };
+
+  services.nginx.virtualHosts."${domain}" = {
+    forceSSL = true;
+    enableACME = true;
+    locations."/" = {
+      proxyPass = "http://localhost:${toString port}";
+      proxyWebsockets = true;
+    };
+  };
+
+  environment.systemPackages = [ config.services.headscale.package ];
+}
-- 
cgit v1.3.1