+4

machines/ramune/configuration.nix

reviewed

··· 26 26 };*/ 27 27 }; 28 28 }; 29 29 + server = { 30 30 + enable = true; 31 31 + tailscale.enable = true; 32 32 + }; 29 33 }; 30 34 31 35 system.stateVersion = "24.11";

+5 -5

modules/server/encrypt/tailscale.age

reviewed

··· 1 1 age-encryption.org/v1 2 2 - -> ssh-ed25519 QwbpPw e0s6sI6aX9E6Raeep7UpHV0grnf6TdSQjGMH+x7cF1Q 3 3 - a9ZVCwy7TKf6Fwtai0La9osx4qeo8ytAuXO+ZSzX1Ic 4 4 - --- ysFkOjL7ep6LXu9D3ZtDRerJX1WIvt+I3Jj+JLpqON4 5 5 - �l�{z�u�q���a�(<��7��՗�3�M��v�G��KX��m�|X�� �?��� 6 6 - Ww7��4}Êp Ƴ��dJ!�麦B�}p�#0 � 2 2 + -> ssh-ed25519 QwbpPw FaPxNkTb6Q5EYBjIM4pglJWVW/LkW9lLzsNrSOElB3I 3 3 + XTzvqUF3sQhrhgpjIooRlxQR8Ju8xyA4H4b9xVIORy4 4 4 + --- yEmYYxb8bsLjC1y+cSvkq1YcLkRDFP6YYSdJypoA4wY 5 5 + �@X�YaA懆����R�E��W�^^;Y���"'a���.<�O��I���ܬ 6 6 + F�����)�u���Q���n���t/�Bhx����(�ʮ}WB

+1 -6

modules/server/tailscale.nix

reviewed

··· 13 13 description = "Whether to enable Tailscale."; 14 14 type = types.bool; 15 15 }; 16 16 - 17 17 - authKeySecret = { 18 18 - description = "Age Secret of auth keyfile for Tailscale."; 19 19 - type = types.path; 20 20 - }; 21 16 }; 22 17 23 18 config = mkIf (cfg.enable && cfgRoot.enable) { ··· 32 27 age.secrets."tailscale" = { 33 28 symlink = true; 34 29 path = "/run/secrets/tailscale"; 35 35 - file = cfg.authKeySecret; 30 30 + file = ./encrypt/tailscale.age; 36 31 }; 37 32 38 33 services.tailscale = {