Tailscale (#1)

flake.lock

@@ -693,11 +693,11 @@
     "nvchad-starter": {
       "flake": false,
       "locked": {
-        "lastModified": 1751028259,
-        "narHash": "sha256-d01UFhRq8jTBvG3BL7TGkzO1usQELWHMAHy18ILAu/c=",
+        "lastModified": 1751382025,
+        "narHash": "sha256-EjCffnOFLU5l311EJDvLVP+QtCOUERmvZBEdTZJD/Aw=",
         "owner": "naps62",
         "repo": "nvchad-starter",
-        "rev": "bb2d57364786065b95b21649d0dfef1caa8ee5ab",
+        "rev": "2b048ef2720b1459c210b706cd1924404fafe393",
         "type": "github"
       },
       "original": {

home/common/programs/dev.nix

@@ -22,4 +22,36 @@
     # bruno
     zed-editor
   ];
+
+  programs.tmux = {
+    enable = true;
+    extraConfig = ''
+      setw -g mouse on
+      set -s extended-keys on
+    '';
+  };
+
+  home.file.".claude/settings.json".text = ''
+     {
+       "permissions": {
+          "allow": [
+          "Bash(mkdir:*)",
+          "Bash(rg:*)",
+          "Bash(chmod:*)",
+          "Bash(find:*)",
+          "Bash(rustup target:*)",
+          "Bash(ls:*)",
+          "Bash(cargo:*)",
+          "Bash(cp:*)",
+          "Bash(yarn:*)",
+          "Bash(sed:*)",
+          "Bash(gh:*)",
+          "Bash(git:*)",
+          "Bash(grep:*)",
+          "Bash(node:*)"
+        ],
+        "defaultMode": "acceptEdits"
+      }
+    }
+  '';
 }

hosts/common/features/tailscale.nix

@@ -0,0 +1,9 @@
+{ pkgs, ... }:
+{
+  services.tailscale.enable = true;
+  networking.nameservers = [
+    "100.100.100.100"
+    "8.8.8.8"
+    "1.1.1.1"
+  ];
+}

hosts/desktop/default.nix

@@ -18,6 +18,7 @@
     ../common/features/bluetooth.nix
     ../common/features/ledger.nix
     ../common/features/android-studio.nix
+    ../common/features/tailscale.nix
   ];
 
   networking.hostName = "konishi";
@@ -27,6 +28,10 @@
       systemd-boot.enable = true;
       efi.canTouchEfiVariables = true;
     };
+
+    kernel.sysctl = {
+      "net.ipv6.conf.all.disable_ipv6" = 1;
+    };
   };
 
   system.stateVersion = "24.05";
@@ -58,4 +63,9 @@
       in
       pkgs.lib.splitString "\n" (builtins.readFile authorizedKeys);
   };
+
+  networking.nameservers = [
+    "100.100.100.100"
+    "10.1.10.1"
+  ];
 }