add ktailctl and reconfigure tailscale to have sensible defaults

nixos/configuration.nix

@@ -1,6 +1,7 @@
 # Edit this configuration file to define what should be installed on
 # your system.  Help is available in the configuration.nix(5) man page
 # and in the NixOS manual (accessible by running ‘nixos-help’).
+{ pkgs, ... }:
 {
   nix = {
     settings = {
@@ -9,6 +10,9 @@
     };
   };
 
+  # install the most recent stable linux kernel
+  boot.kernelPackages = pkgs.linuxPackages_latest;
+
   # Bootloader.
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;

nixos/development.nix

@@ -1,5 +1,10 @@
 { pkgs, ... }: {
-  environment.systemPackages = with pkgs; [ direnv devenv ];
+  environment.systemPackages = with pkgs; [ devenv ];
+
+  programs.direnv = {
+    enable = true;
+    nix-direnv.enable = true;
+  };
 
   nix.extraOptions = ''
     extra-substituters = https://devenv.cachix.org

nixos/gui-pkgs.nix

@@ -6,6 +6,7 @@ let
     onlyoffice-bin
     krita
     ytmdesktop
+    ktailctl
     wl-clipboard
     # we install xdg-desktop-portal-gtx so theming works from kde
     xdg-desktop-portal-gtk
@@ -19,4 +20,20 @@ in {
     corefonts
     (nerdfonts.override { fonts = [ "FiraCode" ]; })
   ];
+
+  # Systemd user services
+  # See https://wiki.nixos.org/wiki/Systemd/User_Services for more information
+  systemd.user.services = {
+    ktailctl = {
+      enable = true;
+      after = [ "network.target" ];
+      wantedBy = [ "default.target" ];
+      description =
+        "A GUI to monitor and manage Tailscale on your Linux desktop, built using KDE Frameworks and Kirigami2.";
+      serviceConfig = {
+        Type = "simple";
+        ExecStart = "${pkgs.ktailctl}/bin/ktailctl";
+      };
+    };
+  };
 }

nixos/pkg.nix

@@ -38,6 +38,7 @@
     nixfmt
     forgejo-runner # for some reason this installs forgejo-runner as act_runner
     libwebp
+    fontforge
 
     # python stuff 🐍
     uv

nixos/tailscale.nix

@@ -5,6 +5,6 @@
     # with the contents of your Tailscale auth key.
     # Make sure your permissions are set correctly, e.g. 0600.
     authKeyFile = "/run/secrets/tailscale";
-    extraUpFlags = [ "--ssh" ];
+    extraUpFlags = [ "--ssh" "--accept-routes" "--accept-dns" "--operator=cswimr" ];
   };
 }