{ hostname, username, ... }: { imports = [ ./${hostname} ../users/${username} ../common/modules/nixos.nix ../common/modules/networking.nix # Services ../common/services/promtail.nix ../common/services/telegraf.nix ../common/services/tailscale.nix ]; # Generic Tailscale configs are in /nixos/common/services/tailscale.nix # Set up the secrets file: sops.secrets."tailscale_key" = { owner = "root"; sopsFile = ../../../secrets/containers/${hostname}.yaml; restartUnits = [ "tailscaled.service" "tailscaled-autoconnect.service" ]; }; services.tailscale.authKeyFile = "/run/secrets/tailscale_key"; networking.hostName = "${hostname}"; }