more

roles/baseline/tasks/tailscale.yml

@@ -38,3 +38,15 @@
   when: tailscale_status.rc != 0 or "Logged out" in tailscale_status.stdout
   no_log: yes  # Hide auth key from logs
   become: true
+
+- name: Tailscale | PATCH | Add Tailscale interface to internal zone
+  ansible.posix.firewalld:
+    zone: internal
+    interface: "{{ item }}"
+    permanent: yes
+    immediate: yes
+    state: enabled
+  with_items:
+    - tailscale0
+  become: true
+