From acab7d30fce30f4c8d98a291edcc9b4c9f135d36 Mon Sep 17 00:00:00 2001
From: Natalie Rose <natalie@omg.lol>
Date: Tue, 15 Sep 2026 01:40:23 +1000
Subject: [PATCH] Auth with TS for deploy webhook

---
 .tangled/workflows/build.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.tangled/workflows/build.yml b/.tangled/workflows/build.yml
index 8e87ecc7..e598b4b6 100644
--- a/.tangled/workflows/build.yml
+++ b/.tangled/workflows/build.yml
@@ -13,6 +13,7 @@ dependencies:
   nixpkgs:
     - docker
     - docker-buildx
+    - tailscale
 
 steps:
   - name: Docker Build & Push
@@ -31,11 +32,13 @@ steps:
     command: |
       set -euo pipefail
 
+      tailscale login --auth-key "$TAILSCALE_AUTHKEY"
+
       payload=$(jq -nc \
         --arg actor "${GITHUB_ACTOR:-unknown}" \
         --arg ref "${TANGLED_REF:-unknown}" \
         --arg commit "${TANGLED_SHA:-unknown}" \
-        --arg ci_run_url "${TANGLED_REPOSITORY}/actions/runs/${TANGLED_PIPELINE_ID}" \
+        --arg ci_run_url "${TANGLED_REPOSITORY:-unknown}/actions/runs/${TANGLED_PIPELINE_ID:-unknown}" \
         '{actor: $actor, ref: $ref, commit: $commit, ci_run_url: $ci_run_url}')
 
       sig=$(printf '%s' "$payload" \
-- 
2.51.2