Add jellyfin container configuration

2023-05-09 20:13:54 +01:00
parent 7e02d58328
commit 1d551d6ea7
4 changed files with 64 additions and 2 deletions
--- a/modules/networking/tailscale.nix
+++ b/modules/networking/tailscale.nix
@ -6,11 +6,12 @@ let cfg = config.modules.networking.tailscale;
 in {
  options.modules.networking.tailscale = {
    enable = mkBoolOpt false;
+    restrictSSH = mkBoolOpt true;
  };

  config = mkIf cfg.enable {
    services.tailscale.enable = true;
-    services.openssh.openFirewall = false;
+    services.openssh.openFirewall = !cfg.restrictSSH;
    networking.firewall = {
      checkReversePath = "loose";
      trustedInterfaces = [ "tailscale0" ];