feat: Tailscale VPN Setup

flake.nix

@@ -41,5 +41,4 @@
 
       systems = [ "x86_64-linux" ];
     };
-  formatter.x86_64-linux = nixpkgs.legacyPackages.x86_64-linux.nixfmt-rfc-style;
 }

machines/jupiter/environments.nix

@@ -35,4 +35,8 @@ in
     bluetooth.enable = true;
     sound.enable = true;
   };
+
+  my.services = {
+    vpn.enable = true;
+  };
 }

modules/default.nix

@@ -3,5 +3,6 @@
   imports = [
     ./environments
     ./hardware
+    ./services
   ];
 }

modules/services/default.nix

@@ -0,0 +1,8 @@
+# Service-related modules
+{ ... }:
+
+{
+  imports = [
+    ./vpn
+  ];
+}

modules/services/vpn/default.nix

@@ -0,0 +1,19 @@
+# self-hosted vpn
+{ config, lib, ... }:
+let
+  cfg = config.my.services.vpn;
+  inherit (config.networking) domain;
+in
+{
+  options.my.services.vpn = with lib; {
+    enable = mkEnableOption "Headscale VPN Setup";
+  };
+
+  config = lib.mkIf cfg.enable (
+    lib.mkMerge [
+      {
+        services.tailscale.enable = true;
+      }
+    ]
+  );
+}