Tailscale by default sends logs upstream to a centralized logging service. We can disable this by adding an env var
https://tailscale.com/kb/1011/log-mesh-traffic?tab=linux#opting-out-of-client-logging. This is especially useful when you're using Headscale and don't want to sent any data to Tailscale Inc. (the company).

Logs before this change when I wasn't connected to the internet:
Aug 09 23:49:10 niato tailscaled[1552]: logtail: upload: log upload of 1412 bytes compressed failed: Post "https://log.tailscale.com/c/tailnode.log.tailscale.io/redactedID": failed to resolve "log.tailscale.com": no DNS fallback candidates remain for "log.tailscale.com"

after connecting to the internet:

Aug 09 23:51:08 niato tailscaled[1552]: logtail: upload succeeded after 3 failures and 50s

and after applying this patch and setting this option to true:

Aug 10 05:14:00 niato tailscaled[245889]: 2025/08/10 05:14:00 You have disabled logging. Tailscale will not be able to provide support.

Things done

• Built on platform:
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• Tested, as applicable:
  • NixOS tests in nixos/tests.
  • Package tests at passthru.tests.
  • Tests in lib/tests or pkgs/test for functions and "core" functionality.
• Ran nixpkgs-review on this PR. See nixpkgs-review usage.
• Tested basic functionality of all binary files, usually in ./result/bin/.
• Nixpkgs Release Notes
  • Package update: when the change is major or breaking.
• NixOS Release Notes
  • Module addition: when adding a new NixOS module.
  • Module update: when the change is significant.
• Fits CONTRIBUTING.md, pkgs/README.md, maintainers/README.md and other READMEs.

Add a 👍 reaction to pull requests you find important.