tailscale

2024-10-10 21:06:31 +02:00
parent b6e9ed6d09
commit 6132cb3c9a
3 changed files with 26 additions and 11 deletions
@@ -0,0 +1,13 @@
+{ config, ... }:
+
+# DERP is a relay system that Tailscale uses when a direct connection cannot be established.
+# https://tailscale.com/blog/how-tailscale-works/#encrypted-tcp-relays-derp
+
+{
+  # https://login.tailscale.com/admin/machines
+
+  services.tailscale.enable = true;
+  # https://tailscale.com/kb/1085/auth-keys
+  services.tailscale.authKeyFile = config.sops.secrets.tailscale-authkey.path; # also enables autoconnect
+  sops.secrets.tailscale-authkey = {};
+}