fix(agent): allow disabling Tailscale netns (#618)

2026-08-30 00:47:17 +00:00 · 2026-08-25 07:04:15 +02:00
parent 9375e18b55
commit a5b6ecf28e
11 changed files with 157 additions and 7 deletions
@@ -313,6 +313,16 @@ in {
                        '';
                      };

+                      tailscale_netns = mkOption {
+                        type = types.bool;
+                        default = true;
+                        description = ''
+                          Use Tailscale's socket-level routing-loop handling in the dedicated Headplane agent process.
+                          Keep enabled unless its fallback pins the agent's Headscale connection to the wrong interface.
+                          Set to false only after verifying that ordinary OS routing in the container's network namespace reaches Headscale correctly.
+                        '';
+                      };
+
                      package = mkPackageOption pkgs "headplane-agent" {};
                    };
                  };