feat: tailscale via headscale (vpn.mgaction.town) + fix audiobookshelf extraGroups syntax

- services.tailscale auto-registers with headscale using a sops pre-auth key - trust tailscale0 so LAN services are reachable over the tailnet - fix missing semicolon on audiobookshelf extraGroups
2026-07-13 00:17:41 +02:00
parent 101bb948ce
commit 5dddc9d2fb
4 changed files with 36 additions and 15 deletions
@@ -22,4 +22,7 @@
  sops.secrets.darman_password.neededForUsers = true;
  users.users.darman.hashedPasswordFile =
    config.sops.secrets.darman_password.path;
+
+  # Headscale pre-auth key for tailscale auto-registration (see configuration.nix).
+  sops.secrets.tailscale_authkey = { };
 }