diff --git a/nixos/features/tailscale.nix b/nixos/features/tailscale.nix index b8ff8a2..9a935d3 100644 --- a/nixos/features/tailscale.nix +++ b/nixos/features/tailscale.nix @@ -1,5 +1,8 @@ -{ ... }: { +{ config, ... }: { + + sops.secrets.tailscale_auth_key = {}; services.tailscale = { enable = true; + authKeyFile = config.sops.secrets.tailscale_auth_key.path; }; } diff --git a/secrets/default.yaml b/secrets/default.yaml index b3311bd..f3356b1 100644 --- a/secrets/default.yaml +++ b/secrets/default.yaml @@ -1,3 +1,5 @@ +#ENC[AES256_GCM,data:JGTaCbN5X/GOiA==,iv:oYRMpxE5nXaou7j1IA/DsxYzno3wcd9Y5pmgkEvqiNw=,tag:4jIEJ6B0KZGsAgyJrZ7zXQ==,type:comment] +tailscale_auth_key: ENC[AES256_GCM,data:/zeqyxbdgNfWOBymgWslqjalW31TvmHwgFwboHIteZw1F7s2pCpDvCZm/O4o9npLFqNzIRyAvZaq,iv:lCYkHhRRYPVxpZsymNKit+9WAFvC7IA7ZMSFro9Kf5M=,tag:KUw/Eh/AUyT5c9oAlLRUrQ==,type:str] users: noe: password: ENC[AES256_GCM,data:+FlVNBkfm8ogTcWlbY9sR4uvWCbX+dBQ8jtXpsNwdvmTN3ibE6ZAx6XbNG1tbfMpCKYHzvgTLyJB6oHCx3gd+RXESB4fqvsxKLA=,iv:SIvnnQhTD5V1myug5OcLr0b4kaT9vg/3nKtpXyunhQM=,tag:HY43Ap9J5ByW4m7+XqcBZQ==,type:str] @@ -80,8 +82,8 @@ sops: V2MrVDAvUUhOcUtXNGFFcGhoMnVJa28Knt90Cs/tEaxeMjX7McVjEeP+e2Jb0wVs 4etiUZ3Msf5trKLQyDUgRlIVFpn7b17XVt/gLTMBH7RtVfuZCWA2yQ== -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-12-15T05:47:08Z" - mac: ENC[AES256_GCM,data:hNsO2DNV9tIsr/22SajbpXSWt2PHmXVKL0UyMDhdE5hvLNbQNgze/FyW6bjQ1z7PnuCoiXrEHf2pvgsNZc3Fl+cRxvtpjSo1l2U45lp8wXhj6a5YeV9xSCy78yajmEk3XXhTyMuAXUn4eZ+UWUXk+Co1Fdmd15DOLZhH0vLiyRQ=,iv:y9mEhHZuJIP5VyX/R9wqUlNEI3q1tmzaIX7nVuR8WAE=,tag:II47gT99xY8emAKPKcpLNg==,type:str] + lastmodified: "2023-12-17T20:21:39Z" + mac: ENC[AES256_GCM,data:IbpBloPeCvdYqloShrSvAIUzjCk+/1+Gl4+LbyKGnO9GUadlwJTyA/WDWiCkdmyFqqpMclD4Kq4CDYK341pSjyNdbfO2nIWU7/k+T7MaGoOzCJZhK/ysZjn7uUeNpkRNBJMht7VYGc6V4iEvJ835z4VAfnTb51mBz+Ytjpk6K+c=,iv:+RVwgp3btRyi1fCjPcMPZ5Du+3RlCkwFNqjFGrS+5zE=,tag:fpNwqMS6CH6pgd2QmaWggA==,type:str] pgp: [] unencrypted_suffix: _unencrypted version: 3.8.1