···

       
26
       
26
       
 
       
        };*/

     

       
27
       
27
       
 
       
      };

     

       
28
       
28
       
 
       
    };

     

       
29
       
29
       
+
       
    server = {

     

       
30
       
30
       
+
       
      enable = true;

     

       
31
       
31
       
+
       
      tailscale.enable = true;

     

       
32
       
32
       
+
       
    };

     

       
29
       
33
       
 
       
  };

     

       
30
       
34
       
 
       


     

       
31
       
35
       
 
       
  system.stateVersion = "24.11";

     

···

       
1
       
1
       
 
       
age-encryption.org/v1

     

       
2
       
2
       
-
       
-> ssh-ed25519 QwbpPw e0s6sI6aX9E6Raeep7UpHV0grnf6TdSQjGMH+x7cF1Q

     

       
3
       
3
       
-
       
a9ZVCwy7TKf6Fwtai0La9osx4qeo8ytAuXO+ZSzX1Ic

     

       
4
       
4
       
-
       
--- ysFkOjL7ep6LXu9D3ZtDRerJX1WIvt+I3Jj+JLpqON4

     

       
5
       
5
       
-
       
�l�{z�u�q���a�(<��7��՗�3�M��v�G��KX��m�|X��	�?���

     

       
6
       
6
       
-
       
Ww7��4}Êp Ƴ��dJ!�麦B�}p�#0 �
     

       
2
       
2
       
+
       
-> ssh-ed25519 QwbpPw FaPxNkTb6Q5EYBjIM4pglJWVW/LkW9lLzsNrSOElB3I

     

       
3
       
3
       
+
       
XTzvqUF3sQhrhgpjIooRlxQR8Ju8xyA4H4b9xVIORy4

     

       
4
       
4
       
+
       
--- yEmYYxb8bsLjC1y+cSvkq1YcLkRDFP6YYSdJypoA4wY

     

       
5
       
5
       
+
       
�@X�YaA懆����R�E��W�^^;Y���"'a���.<�O��I���ܬ

     

       
6
       
6
       
+
       
F�����)�u���Q���n���t/�Bhx����(�ʮ}WB
     

···

       
13
       
13
       
 
       
      description = "Whether to enable Tailscale.";

     

       
14
       
14
       
 
       
      type = types.bool;

     

       
15
       
15
       
 
       
    };

     

       
16
       
16
       
-
       


     

       
17
       
17
       
-
       
    authKeySecret = {

     

       
18
       
18
       
-
       
      description = "Age Secret of auth keyfile for Tailscale.";

     

       
19
       
19
       
-
       
      type = types.path;

     

       
20
       
20
       
-
       
    };

     

       
21
       
16
       
 
       
  };

     

       
22
       
17
       
 
       


     

       
23
       
18
       
 
       
  config = mkIf (cfg.enable && cfgRoot.enable) {

     
···

       
32
       
27
       
 
       
    age.secrets."tailscale" = {

     

       
33
       
28
       
 
       
      symlink = true;

     

       
34
       
29
       
 
       
      path = "/run/secrets/tailscale";

     

       
35
       
35
       
-
       
      file = cfg.authKeySecret;

     

       
30
       
30
       
+
       
      file = ./encrypt/tailscale.age;

     

       
36
       
31
       
 
       
    };

     

       
37
       
32
       
 
       


     

       
38
       
33
       
 
       
    services.tailscale = {