fix: update tailscale flags

hosts/hecuba/default.nix

@@ -64,6 +64,11 @@
     ];
   };
 
+  nix.settings.trusted-users = [
+    "root"
+    "@wheel"
+  ];
+
   environment.systemPackages = with pkgs; [
     vim
     git

modules/tailscale/default.nix

@@ -12,6 +12,8 @@
     services.tailscale = {
       enable = true;
       openFirewall = true;
+      extraSetFlags = [ "--netfilter-mode=nodivert" ];
+      extraDaemonFlags = [ "--no-logs-no-support" ];
     };
   };
 }