+2

nix/nixos/modules/networking/default.nix

reviewed

··· 18 18 }; 19 19 20 20 config = lib.mkIf cfg.enable { 21 21 + my.networking.tailscale.advertise.tags = lib.optionalAttrs cfg.trusted ["trusted"]; 22 22 + 21 23 networking = { 22 24 enableIPv6 = cfg.ipv6.enable; 23 25 firewall.enable = true;

+2 -4

nix/nixos/modules/tailscale/default.nix

reviewed

··· 45 45 46 46 boot.kernelModules = ["wireguard"]; 47 47 services.tailscale = let 48 48 - tags = 49 49 - cfg.advertise.tags 50 50 - ++ lib.optionals cfg.trusted ["trusted"]; 48 48 + inherit (cfg.advertise) tags; 51 49 formattedTags = 52 52 - tags 50 50 + cfg.advertise.tags 53 51 |> map (it: "tag:${it}") 54 52 |> builtins.concatStringsSep ","; 55 53 in {

+1

nix/nixos/profiles/server.nix

reviewed

··· 14 14 enable = true; 15 15 advertise.exitNode = true; 16 16 advertise.routes = [routingPrefix]; 17 17 + advertise.tags = ["server"]; 17 18 }; 18 19 }; 19 20

+8

secrets/.rekeyed/desktop/949befb2e98aebd1e07ac15c35160112-tailscale-oauth-secret.age

reviewed

··· 1 1 + age-encryption.org/v1 2 2 + -> ssh-ed25519 NQ2aOg t3vhToLXbmueDNnBJTfUbNYzf6uC5xyQmtKz0J9I9EQ 3 3 + KwnCQ3+K7/fmhCPgnRgkKRYDr7FRybbiRVucanun6Pg 4 4 + -> U>-grease WXA;-l6X <L 5 5 + Tb7+ze33rcsstjezIcxadW3NOZv9XMm7XNUrP86opK55iMY3WbmHBn5RC+hGcxeU 6 6 + 3GXj 7 7 + --- 6xPhW+/1rzID5klocJhDMJXEimXEPn5SZFo731IJscQ 8 8 + ���G�ϐ*�˪��2m#2�� �5�l����c�1�2Z�T\��Ru�g�碼�n�r���p����I�'�Ѹ��}����-*���u������<�

-7

secrets/.rekeyed/desktop/bfba8baee1321c58651fb30f76571bfa-tailscale-oauth-secret.age

reviewed

··· 1 1 - age-encryption.org/v1 2 2 - -> ssh-ed25519 NQ2aOg WmheJS8dFyWpxR+BYtAOjHK2XWEhV9CSbn4IewCrjzk 3 3 - IIDbNwU2uvyF7D1o21QkGGcQ+giQZIrcVcSgq1bnd0Y 4 4 - -> ~-grease DW 5 5 - Ey0jNnJ4ZsbXBnEJ5zNy0m4CRkfeZbFeOmOYdYZdKd4CDM662jeUPP8cRsJlrqs 6 6 - --- Zd4N/WHHoQKQT3u7bTZe5UV99DbCQfMuJsHWJW3lw3o 7 7 - m#!��܃���"�s�^ϛ�`����2XY���Zb��mYUsz�1�Y(����
�;J��x&N8P�@�����Y��FծK�O�O�h���*(l+7|2

secrets/.rekeyed/laptop/317f983cb1f84c2b53cfd6b6d10938ac-tailscale-oauth-secret.age

reviewed

This is a binary file and will not be displayed.

secrets/.rekeyed/laptop/43a88bb71edab040fdb0a6da03c35619-tailscale-oauth-secret.age

reviewed

This is a binary file and will not be displayed.

-9

secrets/.rekeyed/raspberrypi/aec123d2d994452a929f46a9f3328ad8-tailscale-oauth-secret.age

reviewed

··· 1 1 - age-encryption.org/v1 2 2 - -> ssh-ed25519 7Q9N6w NXgfB328+a9nMohLNItW/yF3MQWEx8nQrJj6vGOydhY 3 3 - uyfBgb7pmygptL/1qpZOuvPwQ8WqjK0gWI5uYj84j0g 4 4 - -> IXbg~o8'-grease 5 5 - pBlPftSQDw/3SXNQyMBZAfvJF4Y151TQZMKiDryH4+WHu0G2uRLrye5DqGhbeNNO 6 6 - w+bURiSKXg 7 7 - --- Edv9UQJzFK8DBVE0SJkeotu3qieCrXW56WD9VfxFsAI 8 8 - ��?��w:�=ǚ<�IJ����k3Rf�Q��Y=zx��YG
A�d�$��rc24z�B�V��4�b��y�~�� �G�{�I�W�T� 9 9 - ^(�p���m=wй

secrets/.rekeyed/raspberrypi/e6c7e6a445b08b2e2173c439745e2c4b-tailscale-oauth-secret.age

reviewed

This is a binary file and will not be displayed.

+9

secrets/tailscale-oauth-secret-old.age

reviewed

··· 1 1 + age-encryption.org/v1 2 2 + -> piv-p256 0D9K1g A4iPqYikWrbYFNvVzW2gs2GfhoQIpEfc9DilhCiCctjr 3 3 + q0um7wfdAWFrd0QVSIL+gisBMZS1wbyV4W4ZDSZlQlQ 4 4 + -> piv-p256 4lCx1w At8o398WWqIoKdZQN50CjmW3naIjvNSjn9H80e6Q43y1 5 5 + VPz3s9+ZwdAOYA06iRmyWYeQ7/qfx1S/b3egVBRigAw 6 6 + -> zw4[q-grease 7 7 + k7YR8Hxmq5pTcBexkqS5mjiZ4DpVdp+ixaU9HCYdQYAXRtqvrQ 8 8 + --- caOeKMw+a4Vw6C/a+0DfVBrZ1W0XeX4wu1pfKNZSqC4 9 9 + g��������}2�+��J*`�^�\ႺKnҊ�9�QiI$������3((��lf��4ܽ�mp�k�R��OX�vU��fP{A��݌@��d��۪E˖

+10 -8

secrets/tailscale-oauth-secret.age

reviewed

··· 1 1 age-encryption.org/v1 2 2 - -> piv-p256 0D9K1g A4iPqYikWrbYFNvVzW2gs2GfhoQIpEfc9DilhCiCctjr 3 3 - q0um7wfdAWFrd0QVSIL+gisBMZS1wbyV4W4ZDSZlQlQ 4 4 - -> piv-p256 4lCx1w At8o398WWqIoKdZQN50CjmW3naIjvNSjn9H80e6Q43y1 5 5 - VPz3s9+ZwdAOYA06iRmyWYeQ7/qfx1S/b3egVBRigAw 6 6 - -> zw4[q-grease 7 7 - k7YR8Hxmq5pTcBexkqS5mjiZ4DpVdp+ixaU9HCYdQYAXRtqvrQ 8 8 - --- caOeKMw+a4Vw6C/a+0DfVBrZ1W0XeX4wu1pfKNZSqC4 9 9 - g��������}2�+��J*`�^�\ႺKnҊ�9�QiI$������3((��lf��4ܽ�mp�k�R��OX�vU��fP{A��݌@��d��۪E˖ 2 2 + -> piv-p256 0D9K1g ApKEaW1Jh9FkPAlVq8ludxqTV4wB4buzw7ySAU2cjZgS 3 3 + p6zTIMMoBETFKO9c6tr36cM1idfE4qFUogxfLGMgfKk 4 4 + -> piv-p256 4lCx1w AnHA3nEKz5HJQV/FiOjlA/tx7vbLTU9cIbhvI790sdWl 5 5 + 2xaHuuyl2KrqdVI1DlcsNmdFBbanpbK7KivC8lo6op8 6 6 + -> ;n)-grease AfXjg .wE 7 7 + aUP2Rbfi8bmcj06AeGl1bVxw78jQc7xFzF4PIQlGoR/n14UCh702q56/lwgoGTqv 8 8 + 8JI3JOf+OvsI 9 9 + --- PH861DYqTiJKLZqXGbIMpieD8Hugx6Otsn7zmaqG3C8 10 10 + �S�m��o�X�;�Q�P3�됡�H���>$4c��a��)o+�<n���r��@� 11 11 + l�K�m u�m��V
��M1e;Ƿ3���c�}�Ґ?�