From 0f0ecb667a367d3b650131c94a1a11712bda8104 Mon Sep 17 00:00:00 2001
From: Alan Pearce
Date: Thu, 30 May 2024 22:26:55 +0200
Subject: linde: set up golink

---
 system/linde.nix | 12 ++++++++++++
 1 file changed, 12 insertions(+)

(limited to 'system')

diff --git a/system/linde.nix b/system/linde.nix
index a55abb06..00c71b49 100644
--- a/system/linde.nix
+++ b/system/linde.nix
@@ -38,6 +38,14 @@ in
     binarycache.file = ../secrets/binarycache.age;
     dex.file = ../secrets/dex.age;
     powerdns.file = ../secrets/powerdns.age;
+    golink = let golink = config.services.golink; in {
+      # hope this doesn't collide...
+      path = "${golink.dataDir}/.config/tsnet-golink/auth.key";
+      owner = golink.user;
+      mode = "400";
+      symlink = false;
+      file = ../secrets/golink.age;
+    };
   };
 
   # Use the systemd-boot EFI boot loader.
@@ -269,6 +277,10 @@ in
     extraUpFlags = [ "--accept-routes" ];
     useRoutingFeatures = "client";
   };
+  services.golink = {
+    enable = true;
+    tailscaleAuthKeyFile = config.age.secrets.golink.path;
+  };
 
   services.journald.extraConfig = ''
     MaxRetentionSec=1 month
-- 
cgit 1.4.1