flake update; msty update; +headscale config

hosts/m3-kratos/services/default.nix

@@ -4,6 +4,7 @@
     ./n8n.nix
     ./postgres.nix
     ./sound.nix
+    ./tailscale.nix
     ./udev.nix
     ./wireguard.nix
   ];
@@ -11,7 +12,6 @@
     hypridle.enable = true;
     printing.enable = true;
     gvfs.enable = true;
-    tailscale.enable = true;
     trezord.enable = true;
     gnome.gnome-keyring.enable = true;
     qdrant.enable = true;

hosts/m3-kratos/services/tailscale.nix

@@ -0,0 +1,11 @@
+{
+  services.tailscale = {
+    enable = true;
+    useRoutingFeatures = "client";
+    extraUpFlags = [
+      "--login-server https://va.m3tam3re.com"
+      "--exit-node=m3-atlas"
+      "--exit-node-allow-lan-access"
+    ];
+  };
+}

hosts/m3-kratos/services/wireguard.nix

@@ -10,7 +10,7 @@
     };
     NO = {
       configFile = config.age.secrets.wg-NO.path;
-      autostart = true;
+      autostart = false;
     };
     US = {
       configFile = config.age.secrets.wg-US.path;