remove headscale and tailscale

flake.lock

···
         "srcery-textmate": "srcery-textmate",
         "srcery-tmux": "srcery-tmux",
         "srvos": "srvos",
-        "tsnsrv": "tsnsrv",
         "weather": "weather"
       }
     },
···
       "original": {
         "owner": "nix-systems",
         "repo": "default",
-        "type": "github"
-      }
-    },
-    "tsnsrv": {
-      "inputs": {
-        "flake-parts": [
-          "flake-parts"
-        ],
-        "nixpkgs": [
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1759265704,
-        "narHash": "sha256-b0d0lfERd3+N/K0oq4YsX2pSMGh5HX5D6ocehEoJjeU=",
-        "owner": "boinkor-net",
-        "repo": "tsnsrv",
-        "rev": "a4e47c178e0bdd4da72fad6f0dd2dea6b89d2d25",
-        "type": "github"
-      },
-      "original": {
-        "owner": "boinkor-net",
-        "repo": "tsnsrv",
         "type": "github"
       }
     },

flake.nix

···
     niri.url = "github:sodiboo/niri-flake";
     niri.inputs.nixpkgs.follows = "nixpkgs";
     niri.inputs.nixpkgs-stable.follows = "nixpkgs";
-    tsnsrv.url = "github:boinkor-net/tsnsrv";
-    tsnsrv.inputs.nixpkgs.follows = "nixpkgs";
-    tsnsrv.inputs.flake-parts.follows = "flake-parts";
 
     qbpm.url = "github:pvsr/qbpm";
     qbpm.inputs.nixpkgs.follows = "nixpkgs";

hosts/crossbell/default.nix

···
           "comics.peterrice.xyz" = "ruan.ygg.pvsr.dev:19191";
           "weather.peterrice.xyz" = "ruan.ygg.pvsr.dev:15658";
           "calendar.peterrice.xyz" = "ruan.ygg.pvsr.dev:52032";
-          "tailscale.peterrice.xyz" = "localhost:9753";
         };
       };
 
-      services = {
-        headscale.enable = config.services.tailscale.enable;
-        headscale.address = "127.0.0.1";
-        headscale.port = 9753;
-        headscale.settings = {
-          ip_prefixes = [
-            "100.64.0.0/10"
-            "fd28:b7:d8::/48"
-          ];
-          server_url = "https://tailscale.peterrice.xyz";
-          dns.base_domain = "ts.peterrice.xyz";
-          dns.magic_dns = true;
-          dns.nameservers.global = [
-            "185.71.138.138"
-            "2001:67c:930::1"
-          ];
-          dns.override_local_dns = true;
-          policy.path = builtins.toFile "acl.json" (
-            builtins.toJSON {
-              acls = [
-                {
-                  action = "accept";
-                  src = [ "*" ];
-                  dst = [ "*:*" ];
-                }
-              ];
-              ssh = [
-                {
-                  action = "accept";
-                  src = [ "${config.local.user.name}@" ];
-                  dst = [ "*" ];
-                  users = [ config.local.user.name ];
-                }
-              ];
-            }
-          );
-        };
-
-        openssh.listenAddresses = [
-          {
-            addr = "0.0.0.0";
-            port = 18325;
-          }
-        ];
-      };
+      services.openssh.listenAddresses = [
+        {
+          addr = "0.0.0.0";
+          port = 18325;
+        }
+      ];
 
       networking.firewall.allowedTCPPorts = [ 18325 ];
 

modules/machines.nix

···
         inputs.nixos-hardware.nixosModules.common-gpu-amd
       ];
       networking.useHostResolvConf = false;
-      services.tailscale.enable = false;
       # TODO get agenix working in containers for real?
       age.identityPaths = lib.mkDefault [ "/etc/ssh/ssh_host_ed25519_key" ];
     };

modules/nixos.nix

···
           userCfg = config.users.users.${username};
           variant = {
             nixpkgs.hostPlatform = "x86_64-linux";
-            services.tailscale.enable = false;
             users.users.root.hashedPasswordFile = lib.mkForce null;
             users.users.${username} = {
               password = "";

modules/tailscale.nix

···
-{
-  flake.modules.nixos.core =
-    { config, lib, ... }:
-    let
-      id = toString config.local.id;
-    in
-    {
-      options.local.tailscale.ip = lib.mkOption {
-        readOnly = true;
-        default = if config.services.tailscale.enable then "100.64.0.${id}" else "127.0.0.1";
-      };
-
-      config = {
-        services.tailscale.enable = lib.mkDefault true;
-        networking.firewall.checkReversePath = "loose";
-        systemd.network.wait-online.ignoredInterfaces = [ "tailscale0" ];
-        networking.firewall.trustedInterfaces = [ "tailscale0" ];
-        boot.kernel.sysctl = {
-          "net.ipv4.ip_forward" = true;
-          "net.ipv6.conf.all.forwarding" = true;
-        };
-        environment.persistence.nixos.directories = [ "/var/lib/tailscale" ];
-      };
-    };
-}

modules/tsnsrv.nix

···
-{ self, inputs, ... }:
-{
-  flake.modules.nixos.tsnsrv =
-    { config, lib, ... }:
-    {
-      imports = [ inputs.tsnsrv.nixosModules.default ];
-
-      config = lib.mkIf (config.services.tsnsrv.services != { }) {
-        services.tsnsrv = {
-          enable = true;
-          defaults.loginServerUrl = "https://tailscale.peterrice.xyz";
-          defaults.authKeyPath = "/run/ts-authkey";
-        };
-
-        systemd.tmpfiles.rules = [ "f /run/ts-authkey 0600 root root -" ];
-      };
-    };
-
-  flake.modules.nixos.core.imports = [ self.modules.nixos.tsnsrv ];
-}