Setup golink

Author: stackptr

flake.lock

@@ -29,6 +29,11 @@
       url = "github:nix-community/disko";
       inputs.nixpkgs.follows = "nixpkgs";
     };
+    golink = {
+      url = "github:tailscale/golink";
+      inputs.nixpkgs.follows = "nixpkgs";
+      inputs.systems.follows = "systems";
+    };
 
     # macOS
     nix-darwin = {

flake.nix

@@ -3,6 +3,17 @@
   pkgs,
   ...
 }: {
+  age.secrets.tailscale-auth-key = {
+    file = ./secrets/tailscale-auth-key.age;
+    mode = "440";
+    owner = config.services.golink.user;
+    group = config.services.golink.group;
+  };
+  services.golink = {
+    enable = true;
+    tailscaleAuthKeyFile = config.age.secrets.tailscale-auth-key.path;
+  };
+
   services.openssh.enable = true;
   services.tailscale.enable = true;
 }

hosts/spore/secrets/tailscale-auth-key.age

@@ -12,6 +12,7 @@
   mac-app-util,
   profile,
   disko,
+  golink,
   ...
 }: let
   keys = import ./keys.nix;
@@ -62,6 +63,7 @@
         {
           nixpkgs.overlays = overlays;
         }
+        golink.nixosModules.default
       ];
     };
   darwinHost = {

hosts/spore/services.nix

@@ -16,6 +16,7 @@ in {
   "hosts/spore/secrets/restic-password.age".publicKeys = keys;
   "hosts/spore/secrets/session-secret.age".publicKeys = keys;
   "hosts/spore/secrets/storage-encryption-key.age".publicKeys = keys;
+  "hosts/spore/secrets/tailscale-auth-key.age".publicKeys = keys;
   "hosts/zeta/secrets/wireless.age".publicKeys = keys;
   "hosts/zeta/secrets/dd-agent.age".publicKeys = keys;
   "hosts/zeta/secrets/znc-conf.age".publicKeys = keys;