Move tailscale to module

hosts/desktop.nix

@@ -44,4 +44,5 @@ with lib.my;
   ];
 
   modules.desktop.gnome.enable = true;
+  modules.networking.tailscale.enable = true;
 }

modules/default.nix

@@ -20,6 +20,7 @@
     ./dev/zig.nix
     ./editors/neovim
     ./editors/vscode.nix
+    ./networking/tailscale.nix
     ./security/gpg.nix
     ./security/pass.nix
     ./shell/git

modules/networking/tailscale.nix

@@ -0,0 +1,20 @@
+{ config, lib, pkgs, ... }:
+
+with lib;
+with lib.my;
+let cfg = config.modules.networking.tailscale;
+in {
+  options.modules.networking.tailscale = {
+    enable = mkBoolOpt false;
+  };
+
+  config = mkIf cfg.enable {
+    services.tailscale.enable = true;
+    services.openssh.openFirewall = false;
+    networking.firewall = {
+      checkReversePath = "loose";
+      trustedInterfaces = [ "tailscale0" ];
+      allowedUDPPorts = [ config.services.tailscale.port ];
+    };
+  };
+}