From d5f71080ea62a3132e4eaeb6885d54d918b147c1 Mon Sep 17 00:00:00 2001
From: Phil Pluckthun <phil@kitten.sh>
Date: Wed, 18 Sep 2024 16:38:35 +0100
Subject: [PATCH] Update tailscale key

---
 machines/ramune/configuration.nix    |  4 ++++
 modules/server/encrypt/tailscale.age | 10 +++++-----
 modules/server/tailscale.nix         |  7 +------
 3 files changed, 10 insertions(+), 11 deletions(-)

diff --git a/machines/ramune/configuration.nix b/machines/ramune/configuration.nix
index 9749e19..7fd7cc7 100644
--- a/machines/ramune/configuration.nix
+++ b/machines/ramune/configuration.nix
@@ -26,6 +26,10 @@
         };*/
       };
     };
+    server = {
+      enable = true;
+      tailscale.enable = true;
+    };
   };
 
   system.stateVersion = "24.11";
diff --git a/modules/server/encrypt/tailscale.age b/modules/server/encrypt/tailscale.age
index 0aa0f4f..4f5953c 100644
--- a/modules/server/encrypt/tailscale.age
+++ b/modules/server/encrypt/tailscale.age
@@ -1,6 +1,6 @@
 age-encryption.org/v1
--> ssh-ed25519 QwbpPw e0s6sI6aX9E6Raeep7UpHV0grnf6TdSQjGMH+x7cF1Q
-a9ZVCwy7TKf6Fwtai0La9osx4qeo8ytAuXO+ZSzX1Ic
---- ysFkOjL7ep6LXu9D3ZtDRerJX1WIvt+I3Jj+JLpqON4
-�l�{z�u�q���a�(<��7��՗�3�M��v�G��KX��m�|X��	�?���
-Ww7�4}Êp Ƴ�dJ!�麦B�}p�#0 �
\ No newline at end of file
+-> ssh-ed25519 QwbpPw FaPxNkTb6Q5EYBjIM4pglJWVW/LkW9lLzsNrSOElB3I
+XTzvqUF3sQhrhgpjIooRlxQR8Ju8xyA4H4b9xVIORy4
+--- yEmYYxb8bsLjC1y+cSvkq1YcLkRDFP6YYSdJypoA4wY
+�@X�YaA懆����R�E�W�^^;Y���"'a���.<�O��I���ܬ
+F�����)�u���Q���n���t/�Bhx����(�ʮ}WB
\ No newline at end of file
diff --git a/modules/server/tailscale.nix b/modules/server/tailscale.nix
index aed8384..706a3bd 100644
--- a/modules/server/tailscale.nix
+++ b/modules/server/tailscale.nix
@@ -13,11 +13,6 @@ in {
       description = "Whether to enable Tailscale.";
       type = types.bool;
     };
-
-    authKeySecret = {
-      description = "Age Secret of auth keyfile for Tailscale.";
-      type = types.path;
-    };
   };
 
   config = mkIf (cfg.enable && cfgRoot.enable) {
@@ -32,7 +27,7 @@ in {
     age.secrets."tailscale" = {
       symlink = true;
       path = "/run/secrets/tailscale";
-      file = cfg.authKeySecret;
+      file = ./encrypt/tailscale.age;
     };
 
     services.tailscale = {
-- 
2.51.2