Add Tailscale, remove WireGuard and old VPS references

- Enable Tailscale on NixOracle and Nixos
- Add SSH matchBlock for Termux (pixel-7a, port 8022)
- Remove extraHosts entries for vps and NixOracle
- Remove WireGuard config, secrets and age key

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

flake.lock

@@ -317,11 +317,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1778822459,
-        "narHash": "sha256-hJlFMK7Es783KU/mhLEGC+xim/EqBMVdbsWgthquo6Y=",
+        "lastModified": 1779773014,
+        "narHash": "sha256-4bQ5dL7zbP2vKu5kfsEJICxGG3ATsOW7sP2QvaXGkHM=",
         "owner": "youwen5",
         "repo": "zen-browser-flake",
-        "rev": "90d4d395e2be09b2d314816dadd34660528c4ee4",
+        "rev": "3ff570b75cf068b0f25d0c2b3a77a0e546a4067b",
         "type": "github"
       },
       "original": {

home/ltadeu6.nix

@@ -467,4 +467,16 @@ PY
   };
 
   programs.home-manager.enable = true;
+
+  programs.ssh = {
+    enable = true;
+    enableDefaultConfig = false;
+    matchBlocks = {
+      termux = {
+        hostname = "pixel-7a";
+        user = "u0_a254";
+        port = 8022;
+      };
+    };
+  };
 }

hosts/NixOracle/configuration.nix

@@ -83,7 +83,11 @@ in {
     c.PasswordIdentityProvider.password_required = True
   '';
 
+  services.tailscale.enable = true;
+
   networking.firewall.allowedTCPPorts = [ 80 443 ];
+  networking.firewall.allowedUDPPorts = [ 41641 ];
+  networking.firewall.trustedInterfaces = [ "tailscale0" ];
 
   security.acme = {
     acceptTerms = true;

hosts/Nixos/configuration.nix

@@ -337,9 +337,6 @@ in {
       (builtins.pathExists ../../secrets/minecraft_rcon_password.age) {
         minecraft_rcon_password.file =
           ../../secrets/minecraft_rcon_password.age;
-      } // lib.optionalAttrs
-      (builtins.pathExists ../../secrets/wireguard_private_key.age) {
-        wireguard_private_key.file = ../../secrets/wireguard_private_key.age;
       };
   };
 
@@ -377,6 +374,8 @@ in {
     ];
   };
 
+  services.tailscale.enable = true;
+
   networking = {
     hostName = "Nixos"; # Define your hostname.
     networkmanager.enable = true;
@@ -389,24 +388,6 @@ in {
     };
     defaultGateway = "192.168.1.1";
     nameservers = [ "8.8.8.8" "1.1.1.1" ];
-    extraHosts = ''
-      191.252.194.81 vps
-      204.216.130.111 NixOracle
-    '';
-    # Enable WireGuard
-    # wireguard.interfaces = {
-    #   wg0 = {
-    #     ips = [ "10.0.0.2/24" ];
-    #     listenPort = 51820;
-    #     privateKey = builtins.readFile config.age.secrets.wireguard_private_key.path;
-    #     peers = [{
-    #       publicKey = (import ../../secrets/secrets.nix).wireguard.peerPublicKey;
-    #       allowedIPs = [ "10.0.0.1" ];
-    #       endpoint = (import ../../secrets/secrets.nix).wireguard.endpoint;
-    #       persistentKeepalive = 25;
-    #     }];
-    #   };
-    # };
   };
 
   time.timeZone = "America/Sao_Paulo";

secrets/secrets.nix

@@ -19,10 +19,4 @@ in {
   "secrets/cloudflare_worker_api_token.age".publicKeys = [ users.ltadeu6 systems.Nixos ];
   "secrets/cloudflare_dns_api_token.age".publicKeys = [ users.ltadeu6 systems.Nixos ];
   "secrets/minecraft_rcon_password.age".publicKeys = [ users.ltadeu6 systems.Nixos ];
-  "secrets/wireguard_private_key.age".publicKeys = [ users.ltadeu6 systems.Nixos ];
-
-  wireguard = {
-    peerPublicKey = "SZa3sH9QzjuhAzSFDybLbOxr3UxwPzV3SaiNLaJIjz0=";
-    endpoint = "vps32536.publiccloud.com.br:51820";
-  };
 }