From 8ee6c1271ae27a484b1e101602b10cedb60db9ab Mon Sep 17 00:00:00 2001
From: Erich Blume <blume.erich@gmail.com>
Date: Wed, 18 Feb 2026 09:24:17 -0800
Subject: [PATCH] Add --accept-routes and --ssh to tailscale config

Makes tailscale settings declarative so they persist across rebuilds.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 nixos/ringtail/configuration.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/nixos/ringtail/configuration.nix b/nixos/ringtail/configuration.nix
index 9956c2b..81988c8 100644
--- a/nixos/ringtail/configuration.nix
+++ b/nixos/ringtail/configuration.nix
@@ -72,7 +72,10 @@
   };
 
   # Tailscale
-  services.tailscale.enable = true;
+  services.tailscale = {
+    enable = true;
+    extraUpFlags = [ "--accept-routes" "--ssh" ];
+  };
 
   # SSH
   services.openssh = {