Headscale and Tailscale config modules

home/features/cli/default.nix

@@ -67,7 +67,6 @@
     comma
     coreutils
     devenv
-    fabric-ai
     fd
     gcc
     go
@@ -79,7 +78,7 @@
     llm
     lf
     nix-index
-    procs
+    nushellPlugins.skim
     progress
     ripgrep
     rocmPackages.rocm-smi

home/m3tam3re/m3-atlas.nix

@@ -7,8 +7,8 @@
 
   features = {
     cli = {
-      fish.enable = true;
+      nushell.enable = true;
-      fzf.enable = true;
+      skim.enable = true;
       nitch.enable = true;
       secrets.enable = false;
       starship.enable = true;

home/m3tam3re/m3-kratos.nix

@@ -48,8 +48,8 @@ in {
       };
       features = {
         cli = {
-          fish.enable = true;
+          nushell.enable = true;
-          fzf.enable = true;
+          skim.enable = true;
           nitch.enable = true;
           secrets.enable = true;
           starship.enable = true;

hosts/common/extraServices/ollama.nix

@@ -12,10 +12,6 @@ in {
   config = mkIf cfg.enable {
     services.ollama = {
       enable = true;
-      package =
-        if config.services.xserver.videoDrivers == ["amdgpu"] # rocblas-6.0.2 broken
-        then pkgs.pinned.ollama
-        else pkgs.ollama;
       acceleration =
         if config.services.xserver.videoDrivers == ["amdgpu"]
         then "rocm"

hosts/m3-atlas/secrets.nix

@@ -22,6 +22,9 @@
       searx = {
         file = ../../secrets/searx.age;
       };
+      tailscale-key = {
+        file = ../../secrets/tailscale-key.age;
+      };
       traefik = {
         file = ../../secrets/traefik.age;
         owner = "traefik";

hosts/m3-atlas/services/tailscale.nix

@@ -1,23 +1,26 @@
-{pkgs, ...}: {
+{
+  config,
+  pkgs,
+  ...
+}: {
   services.tailscale = {
     enable = true;
     useRoutingFeatures = "both";
+    authKeyFile = config.age.secrets.tailscale-key.path;
     extraUpFlags = [
-      "--login-server https://va.m3tam3re.com"
+      "--login-server=${config.services.headscale.settings.server_url}"
       "--advertise-exit-node"
       "--accept-routes"
     ];
   };
 
-  # Persistent systemd service for network settings
+  services.networkd-dispatcher = {
-  systemd.services.configure-network-offload = {
+    enable = true;
-    description = "Configure network offload settings";
+    rules."50-tailscale" = {
-    after = ["network.target"];
+      onState = ["routable"];
-    wantedBy = ["multi-user.target"];
+      script = ''
-    serviceConfig = {
+        "${pkgs.ethtool} NETDEV=$(ip -o route get 8.8.8.8 | cut -f 5 -d " ") | -K $NETDEV rx-udp-gro-forwarding on rx-gro-list off
-      Type = "oneshot";
+      '';
-      RemainAfterExit = true;
-      ExecStart = "${pkgs.ethtool}/bin/ethtool -K ens3 rx-udp-gro-forwarding on rx-gro-list off";
     };
   };
 
@@ -37,5 +40,6 @@
   environment.systemPackages = with pkgs; [
     ethtool
     tailscale
+    networkd-dispatcher
   ];
 }