Unfuck tailscale post incus

This commit is contained in:
Sridhar Ratnakumar 2026-04-19 11:52:06 -04:00
parent a9c844e704
commit 9b2db0501f

View file

@ -52,6 +52,10 @@ in
services.openssh.enable = true;
services.tailscale.enable = true;
# tailscaled installs its rules via iptables-nft, which live in a different
# table from the nftables firewall that incus requires. Adding tailscale0 here
# gets it into the nftables trusted-interfaces set too.
networking.firewall.trustedInterfaces = [ "tailscale0" ];
networking.firewall.allowedTCPPorts = [
80
443