From 3d84bbc64acc0cafc8bea96b659c65dda0ee017f Mon Sep 17 00:00:00 2001
From: "quentin@aristote.fr" <quentin@aristote.fr>
Date: Sat, 10 Oct 2026 19:25:10 +0200
Subject: migrate hephaistos out of local network

---
 config/networking/services/default.nix |  1 +
 config/networking/services/mesh.nix    | 16 ++++++++++++++++
 2 files changed, 17 insertions(+)
 create mode 100644 config/networking/services/mesh.nix

(limited to 'config/networking')

diff --git a/config/networking/services/default.nix b/config/networking/services/default.nix
index 12c1a03..181e537 100644
--- a/config/networking/services/default.nix
+++ b/config/networking/services/default.nix
@@ -7,5 +7,6 @@
     ./ifplugd.nix
     ./igmpproxy.nix
     ./ppp.nix
+    ./mesh.nix
   ];
 }
diff --git a/config/networking/services/mesh.nix b/config/networking/services/mesh.nix
new file mode 100644
index 0000000..c2b6e1e
--- /dev/null
+++ b/config/networking/services/mesh.nix
@@ -0,0 +1,16 @@
+{ ... }:
+{
+  services.tailscale = {
+    enable = true;
+    openFirewall = true;
+    disableTaildrop = true;
+  };
+
+  services.unbound.settings = {
+    server.domain-insecure = "aristote.mesh";
+    forward-zone = {
+      name = "aristote.mesh.";
+      forward-addr = "100.100.100.100";
+    };
+  };
+}
-- 
cgit v1.3.1