hosts: trying to improve connectivity

hosts/common/global/default.nix

@@ -39,6 +39,11 @@
     enableAllTerminfo = true;
   };
 
+  services.resolved = {
+    enable = true;
+    domains = [ "misterio.me" ];
+  };
+
   # Allows users to allow others on their binds
   programs.fuse.userAllowOther = true;
 

hosts/common/optional/tailscale.nix

@@ -1,7 +1,10 @@
 { lib, persistence, ... }:
 {
   services.tailscale.enable = true;
-  networking.firewall.checkReversePath = "loose";
+  networking.firewall = {
+    checkReversePath = "loose";
+    allowedUDPPorts = [ 41641 ]; # Facilitate firewall punching
+  };
 
   environment.persistence = lib.mkIf persistence {
     "/persist".directories = [ "/var/lib/tailscale" ];