Move tailscale to module

modules/default.nix

@@ -20,9 +20,10 @@
     ./dev/zig.nix
     ./editors/neovim
     ./editors/vscode.nix
+    ./networking/tailscale.nix
     ./security/gpg.nix
     ./security/pass.nix
     ./shell/git
     ./shell/zsh
   ];
-}
+}

modules/networking/tailscale.nix

@@ -0,0 +1,20 @@
+{ config, lib, pkgs, ... }:
+
+with lib;
+with lib.my;
+let cfg = config.modules.networking.tailscale;
+in {
+  options.modules.networking.tailscale = {
+    enable = mkBoolOpt false;
+  };
+
+  config = mkIf cfg.enable {
+    services.tailscale.enable = true;
+    services.openssh.openFirewall = false;
+    networking.firewall = {
+      checkReversePath = "loose";
+      trustedInterfaces = [ "tailscale0" ];
+      allowedUDPPorts = [ config.services.tailscale.port ];
+    };
+  };
+}