From a4d6b88b9a774ab4631a9a8e624f8b713e124521 Mon Sep 17 00:00:00 2001
From: Alan Pearce
Date: Tue, 21 May 2024 19:30:55 +0200
Subject: enable Tailscale OIDC client

---
 system/linde.nix | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

(limited to 'system')

diff --git a/system/linde.nix b/system/linde.nix
index 75136576..52ad900c 100644
--- a/system/linde.nix
+++ b/system/linde.nix
@@ -837,7 +837,7 @@ in
 
   services.etcd = {
     enable = true;
-    initialClusterState = "new"; # -> existing
+    initialClusterState = "existing";
     dataDir = "/var/lib/etcd"; # TODO backup
   };
 
@@ -865,7 +865,7 @@ in
           config = {
             clientID = "$GITHUB_CLIENT_ID";
             clientSecret = "$GITHUB_CLIENT_SECRET";
-            redirectURI = "${issuer}/callback";
+            redirectURI = "${issuer}callback";
             orgs = [{
               name = "alan-pearce";
             }];
@@ -873,6 +873,14 @@ in
             useLoginAsID = true;
           };
         }];
+        staticClients = [
+          {
+            name = "Tailscale";
+            id = "oCaiv7aije1thaep0eib";
+            secretEnv = "TAILSCALE_CLIENT_SECRET";
+            redirectURIs = [ "https://login.tailscale.com/a/oauth_response" ];
+          }
+        ];
       };
     };
 
-- 
cgit 1.4.1