integrate sops-nix for secret management
This commit is contained in:
parent
d3f11dd890
commit
99ad3058a3
10 changed files with 141 additions and 16 deletions
|
|
@ -1,4 +1,4 @@
|
|||
{ lib, homelab, ... }: let
|
||||
{ config, lib, homelab, ... }: let
|
||||
ts-flags = [
|
||||
"--advertise-exit-node"
|
||||
"--advertise-routes=10.3.14.0/24,192.168.1.0/24"
|
||||
|
|
@ -20,6 +20,7 @@ in {
|
|||
./homelab/dns.nix
|
||||
./homelab/git.nix
|
||||
./homelab/ai.nix
|
||||
./homelab/sops.nix
|
||||
|
||||
./core/swapfile.nix
|
||||
./core/oom.nix
|
||||
|
|
@ -29,7 +30,7 @@ in {
|
|||
|
||||
services.tailscale = {
|
||||
enable = true;
|
||||
authKeyFile = "/mnt/data/tailscale/authkey";
|
||||
authKeyFile = config.sops.secrets.tailscale_authkey.path;
|
||||
useRoutingFeatures = "server";
|
||||
extraUpFlags = ts-flags;
|
||||
extraSetFlags = ts-flags;
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue