Add tailscale

makefile

@@ -6,6 +6,10 @@ default: copy-configuration-files restart-services
 .PHONY: setup
 setup: system-dependencies /root/router.wg-pub enable-and-start-services mkinitcpio
 
+.PHONY: firewall-edit
+firewall-edit:
+	./firewall-edit.bash
+
 .PHONY: mkinitcpio
 mkinitcpio:
 	mkinitcpio -p linux
@@ -15,7 +19,7 @@ system-dependencies:
 	echo "Updating system..."
 	pacman -Sy --needed archlinux-keyring # get latest keys
 	pacman -Syu # update everything
-	pacman -S --needed dnsmasq nftables fail2ban radvd git dhcpcd wireguard-tools # install anything needed
+	pacman -S --needed dnsmasq nftables fail2ban radvd git dhcpcd wireguard-tools tailscale # install anything needed
 	echo "Done updating system!"
 	echo "The system has updated. This usually means the kernel updated, so tailscale needs you to reboot."
 
@@ -29,6 +33,7 @@ restart-services:
 	# systemctl restart systemd-resolved # this seems to conflict with dnsmasq - not sure we need it?
 	systemctl restart dhcpcd@lan0
 	systemctl restart dhcpcd@wan0
+	# ksystemctl restart tailscaled # is this necessary since no config lies in this repo?
 	echo "Services restarted!"
 
 .PHONY: enable-and-start-services
@@ -41,6 +46,7 @@ enable-and-start-services:
 	# systemctl enable --now systemd-resolved # this seems to conflict with dnsmasq - not sure we need it?
 	systemctl enable --now dhcpcd@lan0
 	systemctl enable --now dhcpcd@wan0
+	# systemctl enable --now tailscaled # is this necessary since no config lies in this repo?
 	echo "Services enabled and restarted!"
 
 .PHONY: copy-configuration-files

nftables.conf

@@ -106,4 +106,4 @@ table ip nat {
 # 		type filter hook forward priority 0; policy accept;
 # 	}
 # }
-#
+#

readme.md

@@ -6,6 +6,7 @@ My little dual-NIC Arch Linux router configuration and scripts.
 
 ```bash
 make setup
+# setup tailscale if you like
 reboot
 ```
 
@@ -24,6 +25,7 @@ Should be done regularly for security reasons.
 
 ```bash
 make setup
+# configure tailscale as needed
 reboot
 ```