tente: add headscale

1 files changed, 19 insertions, 0 deletions

diff --git a/nixos/tente-configuration.nix b/nixos/tente-configuration.nix
index 459fe87..bef490c 100644
--- a/nixos/tente-configuration.nix
+++ b/nixos/tente-configuration.nix
@@ -101,6 +101,25 @@ in
       group = "www-data";
     };
 
+    headscale = {
+      enable = true;
+      port = 8080;
+      # TODO: make dataDir configurable and set it to /srv/
+      settings = {
+        server_url = "https://${domains.tailscaleControlServer}";
+        dns = { base_domain = "tailnet"; };
+      };
+    };
+
+    nginx.virtualHosts.${domains.tailscaleControlServer} = {
+      enableACME = true;
+      forceSSL = true;
+      locations."/" = {
+        proxyPass = "http://localhost:${toString config.services.headscale.port}";
+        proxyWebsockets = true;
+      };
+    };
+
     nginx.virtualHosts.${domains.personalWebsite} = {
       enableACME = true;
       forceSSL = true;