Infinidoge/kiosk
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

setup automatic tailscale connection

Browse source
This commit is contained in:
Infinidoge 2024-12-07 17:54:48 -05:00
parent 5f8e50471c
commit d94c67596d
Signed by: Infinidoge
SSH key fingerprint: SHA256:oAMyvotlNFraMmZmr+p6AxnNfW/GioTs1pOn3V4tQ7A
4 changed files with 23 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
.gitattributes vendored Normal file
View file

@ -0,0 +1 @@
tailscale-client-secret filter=git-agecrypt diff=git-agecrypt

5
git-agecrypt.toml Normal file
View file

@ -0,0 +1,5 @@
[config]
tailscale-client-secret = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINwo8TGBe91mmkc/QonsXtTBKCJtsAGz3YzphDZlzmaO infinidoge@Infini-FRAMEWORK",
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIUIcQljnMxXsLU8RO33kqFRqEOgQi7U0x+UFG4Caskk infinidoge@Infini-DL360",
]

16
kiosk.nix
View file

@ -35,4 +35,20 @@ in
enable = true;
pulse.enable = true;
};
services.tailscale = {
enable = true;
extraUpFlags = [ "--advertise-tags" "tag:kiosk" ];
authKeyFile = ./tailscale-client-secret;
authKeyParameters.ephemeral = false;
openFirewall = true;
};
networking.firewall.trustedInterfaces = [ "tailscale0" ];
services.openssh = {
enable = true;
settings = {
PermitRootLogin = "yes";
};
};
}

1
tailscale-client-secret Normal file
View file

@ -0,0 +1 @@
tskey-client-kJTcn9TxqB21CNTRL-3wZR8ZywdWHdTXqqNRxSWHSz9wRng25jG