nixos/britway: Add tailscale

2023-12-20 00:21:39 +00:00
parent b537524e5a
commit 21136e98b2
3 changed files with 54 additions and 1 deletions
--- a/nixos/boxes/britway/default.nix
+++ b/nixos/boxes/britway/default.nix
@@ -102,6 +102,16 @@ in
                  {
                    matchConfig.Name = "as211024";
                    networkConfig.IPv6AcceptRA = mkForce false;
+                    routes = map (r: { routeConfig = r; }) [
+                      {
+                        Destination = lib.my.c.colony.prefixes.all.v4;
+                        Gateway = allAssignments.estuary.as211024.ipv4.address;
+                      }
+                      {
+                        Destination = lib.my.c.home.prefixes.all.v4;
+                        Gateway = lib.my.c.home.vips.as211024.v4;
+                      }
+                    ];
                  }
                ];
              };
@@ -122,7 +132,17 @@ in
              };

              firewall = {
-                trustedInterfaces = [ "as211024" ];
+                trustedInterfaces = [ "as211024" "tailscale0" ];
+                extraRules = ''
+                  table inet nat {
+                    chain postrouting {
+                      iifname tailscale0 oifname veth0 snat ip to ${assignments.vultr.ipv4.address}
+                      iifname tailscale0 oifname veth0 snat ip6 to ${assignments.vultr.ipv6.address}
+                      iifname tailscale0 oifname as211024 snat ip to ${assignments.as211024.ipv4.address}
+                      iifname tailscale0 oifname as211024 snat ip6 to ${assignments.as211024.ipv6.address}
+                    }
+                  }
+                '';
              };
            };
          }