+2

modules/base/default.nix

reviewed

··· 12 12 ./programs 13 13 ./services 14 14 ]; 15 15 + 16 16 + age.secrets.tailscale-auth.file = ../../secrets/tailscale-auth.age; 15 17 }

+3

modules/desktop/default.nix

reviewed

··· 1 1 + { config, ... }: 1 2 { 2 3 imports = [ 3 4 ./boot.nix ··· 11 12 12 13 ../home.nix 13 14 ]; 15 15 + 16 16 + age.identityPaths = [ "${config.users.users.koi.home}/.ssh/id_ed25519" ]; 14 17 }

+1

modules/desktop/services/default.nix

reviewed

··· 2 2 imports = [ 3 3 ./udev.nix 4 4 ./pipewire.nix 5 5 + ./tailscale.nix 5 6 ]; 6 7 }

+7

modules/desktop/services/tailscale.nix

reviewed

··· 1 1 + { config, ... }: 2 2 + { 3 3 + services.tailscale = { 4 4 + enable = true; 5 5 + authKeyFile = config.age.secrets.tailscale-auth.path; 6 6 + }; 7 7 + }

+5

secrets/secrets.nix

reviewed

··· 10 10 "email-pass-me.age".publicKeys = [ koi ]; 11 11 "email-pass-noreply.age".publicKeys = [ koi ]; 12 12 13 13 + "tailscale-auth.age".publicKeys = [ 14 14 + koi 15 15 + seber 16 16 + ]; 17 17 + 13 18 "vaultwarden.env.age".publicKeys = [ seber ]; 14 19 "ssl-koi.cert.pem.age".publicKeys = [ seber ]; 15 20 "ssl-koi.key.pem.age".publicKeys = [ seber ];

+7

secrets/tailscale-auth.age

reviewed

··· 1 1 + age-encryption.org/v1 2 2 + -> ssh-ed25519 IU0gwQ N6K4OT9LFaSUFUudnhWOA1lQclnUdh1Oemmwg2bykGg 3 3 + WdySBJ00zq6As+pWiTODDiEHG+pwhLM3T0C3gM0cmg8 4 4 + -> ssh-ed25519 RUuPCw f+cFxTSOwEAyh6wJ5dayavEd00q30MgUlw59FB5BPWA 5 5 + Jq4DM6zmBbCu8urWGBMQsGAaY+BHC45JdFfqfRgB1l0 6 6 + --- xpfE8WfQB24ljql333s7h9GG9ZRthooaRoeSIfwImLY 7 7 + �ޕ�k�b����|o��=�"Ҏ=���J�E�^�ԂG��%;��%�J�w�%����ԯFa�&���k��~��t2���uϑi �
1�

-3

systems/miku/default.nix

reviewed

··· 1 1 { 2 2 - config, 3 2 pkgs, 4 3 inputs, 5 4 ... ··· 24 23 layout = "us"; 25 24 variant = "colemak"; 26 25 }; 27 27 - 28 28 - age.identityPaths = [ "${config.users.users.koi.home}/.ssh/id_ed25519" ]; 29 26 30 27 environment.systemPackages = with pkgs; [ 31 28 prismlauncher

+1

systems/seber/services/default.nix

reviewed

··· 1 1 { 2 2 imports = [ 3 3 + ./tailscale.nix 3 4 ./nginx.nix 4 5 ./website.nix 5 6 ./lebel.nix

+7

systems/seber/services/tailscale.nix

reviewed

··· 1 1 + { config, ... }: 2 2 + { 3 3 + services.tailscale = { 4 4 + enable = true; 5 5 + authKeyFile = config.age.secrets.tailscale-auth.path; 6 6 + }; 7 7 + }