add headscale

nixosConfigurations/hetzner-vpn2/default.nix

@@ -2,6 +2,7 @@
   imports = [
     ./hardware.nix
     ./nginx.nix
+    ./headscale.nix
   ];
 
   config = {

nixosConfigurations/hetzner-vpn2/headscale.nix

@@ -0,0 +1,26 @@
+let
+  headscale-port = 8668;
+in
+{
+  services = {
+    headscale = {
+      enable = true;
+      address = "localhost";
+      port = headscale-port;
+      settings = {
+        server_url = "https://headscale.zerforschen.plus";
+        dns = {
+          override_local_dns = false;
+          base_domain = "high-gravity.space";
+        };
+      };
+    };
+    nginx.virtualHosts."uplink.darkest.space" = {
+      addSSL = true;
+      enableACME = true;
+      locations = {
+        "/".proxyPass = "http://localhost:${builtins.toString headscale-port}";
+      };
+    };
+  };
+}