2024-10-10 21:06:31 +02:00
|
|
|
{ config, ... }:
|
|
|
|
|
|
|
|
|
|
# DERP is a relay system that Tailscale uses when a direct connection cannot be established.
|
|
|
|
|
# https://tailscale.com/blog/how-tailscale-works/#encrypted-tcp-relays-derp
|
|
|
|
|
|
|
|
|
|
{
|
|
|
|
|
# https://login.tailscale.com/admin/machines
|
|
|
|
|
|
|
|
|
|
services.tailscale.enable = true;
|
|
|
|
|
# https://tailscale.com/kb/1085/auth-keys
|
2024-11-15 04:46:33 +01:00
|
|
|
services.tailscale.authKeyFile = config.sops.secrets.tailscale-authkey-outer.path; # also enables autoconnect
|
|
|
|
|
sops.secrets.tailscale-authkey-outer.sopsFile = ../secrets/tailscale-outer.yaml;
|
2024-10-10 21:06:31 +02:00
|
|
|
}
|
