From 938d190ed26346947c2fc8a5eb7059d1a56e9ade Mon Sep 17 00:00:00 2001
From: Mikilio <official.mikilio@gmail.com>
Date: Fri, 27 Sep 2024 23:05:20 +0200
Subject: [PATCH] tailscale: add `su` to path

this adds access to `su` via security wrappers
---
 nixos/modules/services/networking/tailscale.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nixos/modules/services/networking/tailscale.nix b/nixos/modules/services/networking/tailscale.nix
index 6804165cd8c2..fe878591166a 100644
--- a/nixos/modules/services/networking/tailscale.nix
+++ b/nixos/modules/services/networking/tailscale.nix
@@ -117,6 +117,7 @@ in {
     systemd.services.tailscaled = {
       wantedBy = [ "multi-user.target" ];
       path = [
+        (builtins.dirOf config.security.wrapperDir) # for `su` to use taildrive with correct access rights
         pkgs.procps     # for collecting running services (opt-in feature)
         pkgs.getent     # for `getent` to look up user shells
         pkgs.kmod       # required to pass tailscale's v6nat check