Headscale, initialization

nixosModules/services/headscale/service.nix

@@ -0,0 +1,26 @@
+{ config, lib, ... }:
+
+{
+  options.headscale = {
+    enable = lib.mkEnableOption "Enable headscale";
+    server = {
+      port = lib.mkOption { default = 7204; };
+      domain = lib.mkOption { type = lib.types.str; };
+    };
+  };
+
+  config = lib.mkIf config.headscale.enable {
+    networking.firewall.allowedUDPPorts = [ 3478 ];
+    services.headscale = {
+      enable = true;
+      port = config.headscale.server.port;
+      settings = {
+        server_url = "https://${config.headscale.server.domain}";
+        dns = {
+          base_domain = "connect.claris";
+          override_local_dns = false;
+        };
+      };
+    };
+  };
+}