tailscale: add exit node functionality to Gutterman

hosts/Gutterman/default.nix

@@ -10,6 +10,7 @@
     ../../modules/nixos/programs/git.nix
 
     ../../modules/nixos/services/tailscale
+    ../../modules/nixos/services/tailscale/exit-node/server.nix
     ../../modules/nixos/services/gameserver/minecraft-server.nix
 
     ../../modules/nixos/system/headless.nix

hosts/Swordsmachine/default.nix

@@ -14,6 +14,7 @@
     ../../modules/nixos/programs/gaming.nix
 
     ../../modules/nixos/services/tailscale
+    ../../modules/nixos/services/tailscale/exit-node/client.nix
     
     ../../modules/nixos/system/colors.nix
     ../../modules/nixos/system/console-colors.nix

modules/nixos/services/tailscale/exit-node/client.nix

@@ -0,0 +1,8 @@
+{ config, ... }:
+
+{
+  services.tailscale = {
+    useRoutingFeatures = "client";
+    extraUpFlags = [ "--exit-node-allow-lan-access=true" ];
+  };
+}

modules/nixos/services/tailscale/exit-node/server.nix

@@ -0,0 +1,20 @@
+{ config, lib, pkgs, ... }:
+
+{
+  services.tailscale = {
+    useRoutingFeatures = "server";
+    extraUpFlags = [ "--advertise-exit-node" ];
+  };
+
+  # performance improvement
+  environment.systemPackages = [ pkgs.ethtool ];
+  services.networkd-dispatcher = {
+    enable = true;
+    rules."50-tailscale" = {
+      onState = [ "routable" ];
+      script = ''
+        ${lib.getExe pkgs.ethtool} -K eth0 rx-udp-gro-forwarding on rx-gro-list off
+      '';
+    };
+  };
+}