-2

modules/base/default.nix

Reviewed

··· 15 15 ./programs 16 16 ./services 17 17 ]; 18 18 - 19 19 - age.secrets.tailscale-auth.file = ../../secrets/tailscale-auth.age; 20 18 }

+1

modules/base/services/default.nix

Reviewed

··· 2 2 imports = [ 3 3 ./openssh.nix 4 4 ./davfs2.nix 5 5 + ./tailscale.nix 5 6 ]; 6 7 }

-1

modules/desktop/services/default.nix

Reviewed

··· 2 2 imports = [ 3 3 ./udev.nix 4 4 ./pipewire.nix 5 5 - ./tailscale.nix 6 5 ]; 7 6 }

-7

modules/desktop/services/tailscale.nix

Reviewed

··· 1 1 - { config, ... }: 2 2 - { 3 3 - services.tailscale = { 4 4 - enable = true; 5 5 - authKeyFile = config.age.secrets.tailscale-auth.path; 6 6 - }; 7 7 - }

+5

secrets/beszel.env.age

Reviewed

··· 1 1 + age-encryption.org/v1 2 2 + -> ssh-ed25519 RUuPCw Z4NeT0a0shsXD+XnYGLjOHAgDuozpFhQIo2gEi2KhRc 3 3 + q2pCjqcPon8UPAS8IibieFk1ZmMgoKTwSzjzIQDYrdg 4 4 + --- Igw6od9HuPQSRCR2cTd7tL4lMUR2kyUWpqz5PtJ1wSU 5 5 + ���ȕ�w�x�E�rG.")��.��I<�����We򊍑[���BA�i`�O� ����NU� ���(�J�����!��
�C,r!e���*�d(�l"

+2 -4

secrets/secrets.nix

Reviewed

··· 10 10 "email-pass-me.age".publicKeys = [ koi ]; 11 11 "email-pass-noreply.age".publicKeys = [ koi ]; 12 12 13 13 - "tailscale-auth.age".publicKeys = [ 14 14 - koi 15 15 - seber 16 16 - ]; 13 13 + "tailscale-auth.age".publicKeys = [ koi seber ]; 17 14 15 15 + "beszel.env.age".publicKeys = [ seber ]; 18 16 "vaultwarden.env.age".publicKeys = [ seber ]; 19 17 "ssl-koi.cert.pem.age".publicKeys = [ seber ]; 20 18 "ssl-koi.key.pem.age".publicKeys = [ seber ];

+19

systems/seber/services/beszel.nix

Reviewed

··· 1 1 + { config, ... }: 2 2 + { 3 3 + age.secrets.beszel-env = { 4 4 + file = ../../../secrets/beszel.env.age; 5 5 + owner = "beszel-hub"; 6 6 + }; 7 7 + 8 8 + services.beszel.hub = { 9 9 + enable = true; 10 10 + port = 6767; 11 11 + host = "127.0.0.1"; 12 12 + environmentFile = config.age.secrets.beszel-env.path; 13 13 + }; 14 14 + 15 15 + services.tailscale.serve = { 16 16 + enable = true; 17 17 + services.beszel.endpoints."tcp:443" = "http://127.0.0.1:6767"; 18 18 + }; 19 19 + }

+1 -1

systems/seber/services/default.nix

Reviewed

··· 1 1 { 2 2 imports = [ 3 3 - ./tailscale.nix 4 3 ./nginx.nix 4 4 + ./beszel.nix 5 5 ./website.nix 6 6 ./junesite.nix 7 7 ./lebel.nix

+2

systems/seber/services/tailscale.nix modules/base/services/tailscale.nix

Reviewed

··· 1 1 { config, ... }: 2 2 { 3 3 + age.secrets.tailscale-auth.file = ../../../secrets/tailscale-auth.age; 4 4 + 3 5 services.tailscale = { 4 6 enable = true; 5 7 authKeyFile = config.age.secrets.tailscale-auth.path;