tailscale

profiles/platforms/laptop.nix

@@ -7,6 +7,5 @@
     };
     gui.camera.enable = true;
     identity.fingerprint.enable = true;
-    network.tailscale.enable = true;
   };
 }

profiles/workloads/srv.nix

@@ -1,7 +1,6 @@
 {
   my.features = {
     cli.base.sshServer = true;
-    network.tailscale.enable = true;
     services.container.enable = true;
   };
 }

profiles/workloads/tailscale/client.nix

@@ -0,0 +1,8 @@
+{
+  my.features.network.tailscale = {
+    enable = true;
+
+    acceptDns = false;
+    acceptRoutes = true;
+  };
+}

profiles/workloads/tailscale/server.nix

@@ -0,0 +1,12 @@
+{
+  my.features.network.tailscale = {
+    enable = true;
+
+    acceptDns = false;
+    acceptRoutes = false;
+
+    advertiseRoutes = [
+      "10.50.0.0/16"
+    ];
+  };
+}