flake/nixos/tailscale.nix

{
  services.tailscale = {
    enable = true;
    # When using this configuration, make sure to create a file at /run/secrets/tailscale
    # with the contents of your Tailscale auth key.
    # Make sure your permissions are set correctly, e.g. 0600.
    authKeyFile = "/run/secrets/tailscale";
    extraUpFlags = [ "--ssh" "--accept-routes" "--accept-dns" "--operator=cswimr" ];
  };
}