tailscale/nginx: fix

system/nixos/nginx-mediaserver.nix

@@ -2,6 +2,11 @@
 
 {
   services.nginx = {
+    package = lib.mkForce (pkgs.nginxQuic.override {
+      withKTLS = true;
+      withImageFilter = true;
+    });
+
     additionalModules = with pkgs.nginxModules; [
       vod
     ];

system/nixos/tailscale-nodns.nix

@@ -1,6 +1,5 @@
 {
   services.tailscale.extraUpFlags = [
-    "--accept-dns"
-    "false"
+    "--accept-dns=false"
   ];
 }

system/nixos/tailscale-router.nix

@@ -7,8 +7,7 @@
     useRoutingFeatures = "server";
 
     extraUpFlags = [
-      "--advertise-routes"
-      "10.0.0.0/24"
+      "--advertise-routes=10.0.0.0/24"
     ];
   };
 }

system/nixos/tailscale.nix

@@ -11,8 +11,7 @@ in
     authKeyFile = config.age.secrets.tailscale-authkey.path;
 
     extraUpFlags = [
-      "--login-server"
-      headscale
+      "--login-server=${headscale}"
       "--stateful-filtering"
     ];
   };