flake/nixos/tailscale.nix

{
  services.tailscale = {
    enable = true;
    # When using this configuration, make sure to create a file at /run/secrets/tailscale
    # with the contents of your Tailscale auth key.
    # Make sure your permissions are set correctly, e.g. 0600.
    authKeyFile = "/run/secrets/tailscale";
    extraUpFlags = [
      "--ssh"
      "--accept-routes"
      "--accept-dns"
      "--operator=cswimr"
    ];
  };
}