manatee: Add storage group that owns /mnt/media/public

hosts/manatee/configuration.nix

@@ -16,7 +16,10 @@
   users.users.alex = {
     isNormalUser = true;
     description = "alex";
-    extraGroups = [ "wheel" ];
+    extraGroups = [
+      "wheel"
+      "storage"
+    ];
   };
 
   environment.systemPackages = with pkgs; [

hosts/manatee/disk-config.nix

@@ -3,6 +3,25 @@
   imports = [ inputs.disko.nixosModules.disko ];
 
   config = {
+    users.groups.storage = { };
+    users.users.storage = {
+      isSystemUser = true;
+      description = "storage";
+      group = "storage";
+    };
+
+    systemd.tmpfiles.settings = {
+      "10-media-public" = {
+        "/mnt/media/public" = {
+          d = {
+            user = "storage";
+            group = "storage";
+            mode = "0775";
+          };
+        };
+      };
+    };
+
     networking.hostId = "0a9474e7"; # Required by ZFS
     disko.devices = {
       disk = {

hosts/manatee/modules/tailscale/default.nix

@@ -0,0 +1,11 @@
+{ ... }:
+{
+  # If an exit node is used, set:
+  # tailscale set --exit-node-allow-lan-access
+  services.tailscale.enable = true;
+
+  networking.firewall = {
+    checkReversePath = "loose";
+    allowedUDPPorts = [ 41641 ];
+  };
+}