civet: as tailscale derp

hosts/civet/default.nix

@@ -7,6 +7,9 @@
 
   facter.reportPath = ./facter.json;
 
+  security.acme.defaults.email = "civet@ocfox.me";
+  security.acme.acceptTerms = true;
+
   boot.loader.grub = {
     efiSupport = true;
     efiInstallAsRemovable = true;

hosts/civet/nixpkgs.nix

@@ -1,6 +1,9 @@
+{ inputs }:
 {
   config = {
     allowUnfree = true;
     allowBroken = true;
   };
+
+  overlays = [ inputs.self.overlays.default ];
 }

hosts/civet/services.nix

@@ -1,5 +1,14 @@
 { pkgs }:
 {
   openssh.enable = true;
-  tailscale.enable = true;
+  tailscale = {
+    enable = true;
+
+    derper = {
+      enable = true;
+      package = pkgs.tailscale-derp.derper;
+      domain = "cyans.dev";
+      verifyClients = true;
+    };
+  };
 }

hosts/default.nix

@@ -23,6 +23,7 @@ let
       inherit system;
       modules = [
         (genConf "${host}")
+        inputs.self.nixosModules.default
       ] ++ modules;
       specialArgs = {
         inherit inputs username home;
@@ -38,7 +39,6 @@ mkMerge [
     inputs.minegrub.nixosModules.default
     inputs.agenix.nixosModules.default
     inputs.niri.nixosModules.niri
-    inputs.self.nixosModules.default
     { nix.registry.self.flake = self; }
   ])
 

modules/default.nix

@@ -4,6 +4,7 @@
     {
       imports = [
         (import ./shadowsocks.nix)
+        (import ./tailscale-derp.nix)
       ];
     };
 }