initial config commit

modules/nixos/features/tailscale.nix

@@ -0,0 +1,20 @@
+{
+  config,
+  lib,
+  ...
+}:
+let
+  feature = "tailscale";
+in
+{
+  config = lib.mkIf config.${feature}.enable {
+    services = {
+      ${feature}.enable = true;
+      nginx.tailscaleAuth.enable = true;
+    };
+
+    networking.firewall.trustedInterfaces = [ "tailscale0" ];
+  };
+
+  options.${feature}.enable = lib.mkEnableOption "enables ${feature}";
+}