nixos-config/machines/orbi/network-tinc.nix

{

  networking.firewall = {
    allowedTCPPorts = [
      655
      721
    ];
    allowedUDPPorts = [
      655
      721
    ];
  };

  tinc.private.enable = true;
  tinc.private.ipv4 = "10.23.42.100";

  tinc.secret.enable = true;
  tinc.secret.ipv4 = "10.123.42.100";

}