fix: tailscale auth key

Author: micartey

modules/network/tailscale.nix

@@ -1,5 +1,16 @@
 { ... }:
 
 {
-  services.tailscale.enable = true;
+
+  services.tailscale = {
+    enable = true;
+    extraUpFlags = [ "--ssh" ];
+    authKeyFile = "/var/.tailscale/auth";
+  };
+
+  sops.secrets = {
+    "tailscale/auth_key" = {
+      path = "/var/.tailscale/auth";
+    };
+  };
 }

secrets/secrets.yaml

@@ -1,12 +1,10 @@
 matrikel-nummer: ENC[AES256_GCM,data:Kw4OIKmPdic=,iv:bXfEJJBePj4Yyxbv9/ZqncKMlakRulqBwdwk9dQWNbE=,tag:vRbYMU+fwhOIbslzvi+k1g==,type:str]
 ssh: ENC[AES256_GCM,data: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,iv:APpCsp2vqd59m4dj6LyarJFyClrXtj5K5cD20FU+3G4=,tag:+afe/d5PfAIye/lmoVQPHA==,type:str]
+tailscale:
+    auth_key: ENC[AES256_GCM,data:eRmkL+0EI7WAcxjhjbmamH6eSLTZHyFofda8+SaRiNkCMuulyrsL4jX42oebPHtVIiMEib2hmE2fc1iIc+s=,iv:ys+xsBAb2IMd4tq+Fj5S3JK3Tkm1GACSN9AKEdHBg+8=,tag:fEkO1MMkdhKPAucG97AoDQ==,type:str]
 github-recovery-keys: ENC[AES256_GCM,data:eyfqxcNQjR/VxIiGIdN/TF6hFBHf3QFTOufJAkppOxquHZ3QDxcJBSQCevqEg/sOUG9/VzbSrCoe7hdycMjirOvLsu1IplugyhZDrjKw9B8xLqu0F5uT4DoOaXaGd0eB0QgAH/gf/zTJSeYuWoGjL9fb/OHmeVv+8q2D8EVZ0Dj5+3Amg2/4yWKxrLLhy5VGVFgnQCD2IdDd6zelHltjhpOV725nHImQM4X/v9CxdrPdUBLXNbynaXrdBdIGb/xn,iv:gQqVUvXW91Q5VtlrwQdPGtie875s1XNSUAyyAZ62rlI=,tag:VrJeyqyv7UGFFK5Jsg4ygA==,type:str]
 steam-recovery-keys: ENC[AES256_GCM,data:Mui5qVxfkiMWex7y8Q+f+N5Qee+f3/380tD5sSgO5My+mSMkWtqaJITDfSqBznCU0QaE3ZewSZZ3rHuDUOMGfijejoH0/mZsQk1C/Q37D0rMDNMgLrjQSOY/sSK84jKTOyQaPbmeAjAEs+zOAPb1dZ1lLqGlo+mHwRUhiG2+8gN33jsAwB2anzP6yHMDuVzYQlr5sZYm4+EQlD4mYgB7fdVc6EI54ITB+65T/fxFvE3uWHxQ5yKGsCAiFvRYw93PtnkjLA+1HyW1zsY4J/gDyZbyEHIgyCcA5jDujdOH3Hgd5Obm7aEPg1lZ5fJQQZjPtc27Xt+c9hHIBJZkrkcw7JhkOndxMf0NZK3kKKxLKLVuBWLI+iFlSA==,iv:oC7Hadt3Fqr0uQ9QEfGMjnyMQra7wSfTKYFr0Y+JrGE=,tag:eB9jby8/VMb9n19Lpzl8/w==,type:str]
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
     age:
         - recipient: age17npxtm22yrq98c67thn6h87gns82uhde07r0y58wxav83eh5rf3q6kkn9k
           enc: |
@@ -17,8 +15,7 @@ sops:
             b1MxNnB6S0JmQ28wVmpiclFPTTBaMUUKUA7/bOzjRJzVPE/dTTsnTeZodaJM9Tpf
             PA9PApbWgx156IqWHDwnjlJNtb5g4IYgNvDW2vxUoTFapQlb19xw3Q==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-03-25T21:26:21Z"
-    mac: ENC[AES256_GCM,data:mP3+Ay1ZPhoIcY90fm2WIjyPBxg1+k990mK5Ier65uRzxd6ygGtcdXhXzh+9DrKJ7bzebfqBjvG+gd5G7idpUiez0AKYy1DyPS0/2qaLyNf8hsfbTpHKVeyqUUEDG70cLOx2Ij4YiWX52WhfWzG7MHAWqUvUgzXS9P6W+qXsCt0=,iv:QLQdZdl5sYFjUoUgT5Hp5HhrXOmTlrGkhtpXLWB+87Q=,tag:Au00fdmnlmPXI/KALoImFA==,type:str]
-    pgp: []
+    lastmodified: "2025-06-16T19:59:14Z"
+    mac: ENC[AES256_GCM,data:qqd9zFdRVFrBys84eaxqW0wpLdcyMc9CD5mSRD9XZV3XyZGhObgDaQdhlTRv4zpn5iVVrMwTgJEmnWPjU8mXd0NSXJFzTpndhbzFpsJELB9576zuQ+hcnkiPEAKYGWzvJDBWuUdwgFUZ/XQaNvXnTPXnOlsv6/WbPtcpQIsx5xc=,iv:7FtATsHqp/yOWNXkUBp1TueGjwJd3zVg7vzc/QNWItw=,tag:oUwu3SyqHjG6cdw/BTcKlQ==,type:str]
     unencrypted_suffix: _unencrypted
-    version: 3.9.4
+    version: 3.10.2