4 commits

Author	SHA1	Message	Date
Kristoffer Dalby	4d0b273b90	types: add node.expiry config, deprecate oidc.expiry ... Introduce a structured NodeConfig that replaces the flat EphemeralNodeInactivityTimeout field with a nested Node section. Add node.expiry config (default: no expiry) as the unified default key expiry for all non-tagged nodes regardless of registration method. Remove oidc.expiry entirely — node.expiry now applies to OIDC nodes the same as all other registration methods. Using oidc.expiry in the config is a hard error. determineNodeExpiry() returns nil (no expiry) unless use_expiry_from_token is enabled, letting state.go apply the node.expiry default uniformly. The old ephemeral_node_inactivity_timeout key is preserved for backwards compatibility. Updates #1711	2026-04-08 13:00:22 +01:00
Kristoffer Dalby	65880ecb58	nix: disable external DERP URL fetch in VM test ... Explicitly set derp.urls to an empty list in the NixOS VM test, matching the upstream nixpkgs test. The VMs have no internet access, so fetching the default Tailscale DERP map would silently fail and add unnecessary timeout delay to the test run.	2026-03-06 05:18:44 -08:00
Kristoffer Dalby	37c6a9e3a6	nix: sync module options and descriptions with upstream nixpkgs ... Add missing typed options from the upstream nixpkgs module: - configFile: read-only option exposing the generated config path for composability with other NixOS modules - dns.split: split DNS configuration with proper type checking - dns.extra_records: typed submodule with name/type/value validation Sync descriptions and assertions with upstream: - Use Tailscale doc link for override_local_dns description - Remove redundant requirement note from nameservers.global - Match upstream assertion message wording and expression style Update systemd script to reference cfg.configFile instead of a local let-binding, matching the upstream pattern.	2026-03-06 05:18:44 -08:00
Kristoffer Dalby	d14be8d43b	nix: add NixOS module and tests (#2857)	2025-11-12 13:11:38 +00:00