modules/tailscale: init

modules/nixos/default.nix

···
     ./nginx.nix
     ./pocket-id.nix
     ./system
+    ./tailscale.nix
   ];
 
   config = {

modules/nixos/tailscale.nix

···
+{
+  config,
+  lib,
+  ...
+}:
+let
+  inherit (lib)
+    mkEnableOption
+    mkIf
+    ;
+  cfg = config.pica.services.tailscale;
+in
+{
+  options.pica.services = {
+    tailscale.enable = mkEnableOption "tailscale";
+  };
+
+  config = mkIf cfg.enable {
+    services.tailscale = {
+      enable = true;
+      extraSetFlags = [ "--ssh" ];
+    };
+  };
+}

systems/leopard/default.nix

···
       graphical.enable = true;
     };
 
+    services = {
+      tailscale.enable = true;
+    };
+
     printing.enable = true;
     networking.enable = true;
     fprintd = {

systems/tardigrade/default.nix

···
         domain = "login.${config.networking.domain}";
         webfinger.enable = true;
       };
+
+      tailscale.enable = true;
     };
 
     metrics = {