From cfd60e8c54072a572bd5a805b1d68108b8ee4100 Mon Sep 17 00:00:00 2001
From: Greg Pfeil <greg@technomadic.org>
Date: Fri, 9 Sep 2022 11:26:49 -0600
Subject: [PATCH 1/2] Add tailscale service module

---
 modules/module-list.nix        |  1 +
 modules/services/tailscale.nix | 55 ++++++++++++++++++++++++++++++++++
 2 files changed, 56 insertions(+)
 create mode 100644 modules/services/tailscale.nix

diff --git a/modules/module-list.nix b/modules/module-list.nix
index b56ba67c..7e771b34 100644
--- a/modules/module-list.nix
+++ b/modules/module-list.nix
@@ -65,6 +65,7 @@
   ./services/spotifyd.nix
   ./services/synapse-bt.nix
   ./services/synergy
+  ./services/tailscale.nix
   ./services/yabai
   ./services/nextdns
   ./programs/bash
diff --git a/modules/services/tailscale.nix b/modules/services/tailscale.nix
new file mode 100644
index 00000000..ed473090
--- /dev/null
+++ b/modules/services/tailscale.nix
@@ -0,0 +1,55 @@
+{ config, lib, pkgs, ... }:
+
+with lib;
+
+let
+  cfg = config.services.tailscale;
+
+in
+{
+  options.services.tailscale = {
+    domain = mkOption {
+      type = types.str;
+      default = "";
+      description = lib.mdDoc "The Tailscale domain. This is displayed at the top left of https://login.tailscale.com/admin, next to the Tailscale logo.";
+    };
+
+    enable = mkEnableOption (lib.mdDoc "Tailscale client daemon");
+
+    package = mkOption {
+      type = types.package;
+      default = pkgs.tailscale;
+      defaultText = literalExpression "pkgs.tailscale";
+      description = lib.mdDoc "The package to use for tailscale";
+    };
+
+    magicDNS = {
+      enable = mkEnableOption (lib.mdDoc "Whether to configure networking to work with Tailscale's MagicDNS.");
+    };
+  };
+
+  config = mkIf cfg.enable {
+    warnings = [
+      (mkIf (cfg.magicDNS.enable && cfg.domain == "") "${showOption cfg.domain} isn't empty, Tailscale MagicDNS search path won't be configured.")
+    ];
+
+    environment.systemPackages = [ cfg.package ];
+    launchd.user.agents.tailscaled = {
+      # derived from
+      # https://github.com/tailscale/tailscale/blob/main/cmd/tailscaled/install_darwin.go#L30
+      serviceConfig = {
+        Label = "com.tailscale.tailscaled";
+        ProgramArguments = [ "${lib.getBin cfg.package}/bin/tailscaled" ];
+        RunAtLoad = true;
+      };
+    };
+    networking = mkIf cfg.magicDNS.enable {
+      dns = [ "100.100.100.100" ];
+      search =
+        if cfg.domain == "" then
+          [ ]
+        else
+          [ "${cfg.domain}.beta.tailscale.net" ];
+    };
+  };
+}

From 7698ffce98b0535de3f1de25a7a3ab1249eef46e Mon Sep 17 00:00:00 2001
From: Greg Pfeil <greg@technomadic.org>
Date: Fri, 9 Sep 2022 11:40:42 -0600
Subject: [PATCH 2/2] Remove lib.mdDoc usage

---
 modules/services/tailscale.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/modules/services/tailscale.nix b/modules/services/tailscale.nix
index ed473090..fb63af90 100644
--- a/modules/services/tailscale.nix
+++ b/modules/services/tailscale.nix
@@ -11,20 +11,20 @@ in
     domain = mkOption {
       type = types.str;
       default = "";
-      description = lib.mdDoc "The Tailscale domain. This is displayed at the top left of https://login.tailscale.com/admin, next to the Tailscale logo.";
+      description = "The Tailscale domain. This is displayed at the top left of https://login.tailscale.com/admin, next to the Tailscale logo.";
     };
 
-    enable = mkEnableOption (lib.mdDoc "Tailscale client daemon");
+    enable = mkEnableOption "Tailscale client daemon";
 
     package = mkOption {
       type = types.package;
       default = pkgs.tailscale;
       defaultText = literalExpression "pkgs.tailscale";
-      description = lib.mdDoc "The package to use for tailscale";
+      description = "The package to use for tailscale";
     };
 
     magicDNS = {
-      enable = mkEnableOption (lib.mdDoc "Whether to configure networking to work with Tailscale's MagicDNS.");
+      enable = mkEnableOption "Whether to configure networking to work with Tailscale's MagicDNS.";
     };
   };