config/networking/services/mesh.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

{ ... }:
{
  services.tailscale = {
    enable = true;
    openFirewall = true;
    disableTaildrop = true;
  };

  services.unbound.settings = {
    server.domain-insecure = "aristote.mesh";
    forward-zone = {
      name = "aristote.mesh.";
      forward-addr = "100.100.100.100";
    };
  };
}