relay1: migrate to wstunnel + WireGuard subnet relay via Headscale

Replace the OpenVPN/OCServ path with a cleaner wstunnel-terminated WireGuard relay on :443, advertise/approve corporate subnet routes through Headscale, and add wsl DNS/route plumbing for tailnet access.
This commit is contained in:
Paul-Henri Froidmont 2026-03-25 14:54:08 +01:00
parent 572c6e3e54
commit a6571d5f39
Signed by: phfroidmont
GPG key ID: BE948AFD7E7873BE
5 changed files with 87 additions and 76 deletions

View file

@ -117,7 +117,7 @@
profiles.system = createSystemProfile self.nixosConfigurations.hel1;
};
relay1 = {
hostname = "rl.froidmont.org";
hostname = "rl.banditlair.com";
profiles.system = createSystemProfile self.nixosConfigurations.relay1;
};
};