13 lines
434 B
Nix
13 lines
434 B
Nix
{ hostname, deployment_type,... }: {
|
|
# Generic Tailscale configs are in /nixos/common/services/tailscale.nix
|
|
# Set up the secrets file:
|
|
sops.secrets."tailscale_key" = {
|
|
owner = "root";
|
|
sopsFile = ../../../secrets/${deployment_type}/${hostname}.yaml;
|
|
restartUnits = [
|
|
"tailscaled.service"
|
|
"tailscaled-autoconnect.service"
|
|
];
|
|
};
|
|
services.tailscale.authKeyFile = "/run/secrets/tailscale_key";
|
|
}
|