vinzenz/nixos-configuration
0
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

headscale: enable DERP

Browse source
This commit is contained in:
Vinzenz Schroeter 2026-01-04 21:59:05 +01:00 • committed by müde
parent a66dfe0b95
commit f5728963e6
1 changed files with 16 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

16
nixosConfigurations/hetzner-vpn2/headscale.nix
View file

@ -2,6 +2,8 @@ let
headscale-port = 8668; headscale-port = 8668;
in in
{ {
# sudo tailscale up --reset --force-reauth --login-server https://uplink.darkest.space --operator=$USER
services = { services = {
headscale = { headscale = {
enable = true; enable = true;
@ -13,8 +15,19 @@ in
override_local_dns = false; override_local_dns = false;
base_domain = "high-gravity.space"; base_domain = "high-gravity.space";
}; };
derp = {
server = {
enabled = true;
verify_clients = true;
stun_listen_addr = "0.0.0.0:3478";
ipv4 = "78.46.242.90";
ipv6 = "2a01:4f8:c013:65dd::1";
};
urls = [ ];
}; };
}; };
};
nginx.virtualHosts."uplink.darkest.space" = { nginx.virtualHosts."uplink.darkest.space" = {
enableACME = true; enableACME = true;
forceSSL = true; forceSSL = true;
@ -24,4 +37,7 @@ in
}; };
}; };
}; };
# for DERP
networking.firewall.allowedUDPPorts = [ 3478 ];
} }