diff --git a/secrets/rekeyed/axol/1ee57cb56c17a905d8f6d68eb574db79-02cace87552ceb629ab03cd084eeae6761008fddebed6b75f9a013d122a25030.age b/secrets/rekeyed/axol/1ee57cb56c17a905d8f6d68eb574db79-02cace87552ceb629ab03cd084eeae6761008fddebed6b75f9a013d122a25030.age
new file mode 100644
index 0000000..9391cb8
--- /dev/null
+++ b/secrets/rekeyed/axol/1ee57cb56c17a905d8f6d68eb574db79-02cace87552ceb629ab03cd084eeae6761008fddebed6b75f9a013d122a25030.age
@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 JMblKQ /KeQPyNmEYg1qHq5M4z3aQ7Jt4dwozMQMhmb1wzdDDw
+kS77B2HAZxnhMzcD9bTkcyhGiRrkzEv6+UDcE0lonJU
+-> BVh{PUl}-grease K D$G T_Ov7Cb
+vmCUTiAi81FTpapoJgHlCO9e6ZXzUW5QfuclIZbG2gqoL6XKSvED84gdZeIeZ3TA
+tSFu/4eADDeqoGKiFQSt/Ji+qy2XDmIVJh400QwcUsjZasRXMquGPn6jDxo
+--- +5WuWL/wQ0EH3xpoQ3f5mLiHZNsXO8wGpsNBh+PfTkA
+�A��ߘ�Tfl�������Z�dW4��N����$[P#�Z��������Ò�A��F�r�b�d�-`,@�������
\ No newline at end of file
diff --git a/secrets/rekeyed/baxter/5b9aeed25aabf9b5f06ec083278ad21c-02cace87552ceb629ab03cd084eeae6761008fddebed6b75f9a013d122a25030.age b/secrets/rekeyed/baxter/5b9aeed25aabf9b5f06ec083278ad21c-02cace87552ceb629ab03cd084eeae6761008fddebed6b75f9a013d122a25030.age
new file mode 100644
index 0000000..0682c67
--- /dev/null
+++ b/secrets/rekeyed/baxter/5b9aeed25aabf9b5f06ec083278ad21c-02cace87552ceb629ab03cd084eeae6761008fddebed6b75f9a013d122a25030.age
@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 Z9MeFA 2SrMV2OMZdsZPSaxzxfgQF2ukrzRme+Vt4eAcT7dkAs
+QpHJD8cT6DMR1FP1ft57hRCYjZW6aw16cEv61mBqADg
+-> v.`66g}-grease CAkD Ap<g
+BQxsewykSzbTiU+pZmYdy4b0E2I225h0XVUFQ3mMMxHKTznsJhdon86DByrlPIK5
+S6W2AJ/wMHauk8EzHBTWsTiZnvmAk04OpLjxlgfl
+--- xQos1NCssn+gCQMs3fdLeOxgOeLRvsYZlCW9cYRsGFs
+/7}�r���Ƞ����k(-�N(�߈��Pf�n��E��3fL�dɆ{Az�B���yS
F����8X���Ty��8
�9�Pu��
\ No newline at end of file
diff --git a/systems/x86_64-linux/axol/clicks.networking.tailscale.authKeyFile.age b/systems/x86_64-linux/axol/clicks.networking.tailscale.authKeyFile.age
new file mode 100644
index 0000000..e255bb5
Binary files /dev/null and b/systems/x86_64-linux/axol/clicks.networking.tailscale.authKeyFile.age differ
diff --git a/systems/x86_64-linux/axol/default.nix b/systems/x86_64-linux/axol/default.nix
index b777f12..282d327 100644
--- a/systems/x86_64-linux/axol/default.nix
+++ b/systems/x86_64-linux/axol/default.nix
@@ -57,6 +57,12 @@
     database_password_path = config.age.secrets."clicks.services.headscale.database_password_path".path;
   };
 
+  clicks.networking.tailscale = {
+    enable = true;
+    server = "vpn.auxolotl.org";
+    authKeyFile = config.age.secrets."clicks.networking.tailscale.authKeyFile".path;
+  };
+
   age.secrets."clicks.services.headscale.database_password_path" = {
     generator.script = "alnum";
     group = "headscale";
@@ -64,5 +70,10 @@
     unstableName = true; # Clicks option to base the name on a hash of the contents ... helps with autorestarting services
   };
 
+  age.secrets."clicks.networking.tailscale.authKeyFile" = {
+    rekeyFile = ./clicks.networking.tailscale.authKeyFile.age;
+    unstableName = true;
+  };
+
   system.stateVersion = "23.11";
 }
diff --git a/systems/x86_64-linux/baxter/clicks.networking.tailscale.authKeyFile.age b/systems/x86_64-linux/baxter/clicks.networking.tailscale.authKeyFile.age
new file mode 100644
index 0000000..e255bb5
Binary files /dev/null and b/systems/x86_64-linux/baxter/clicks.networking.tailscale.authKeyFile.age differ
diff --git a/systems/x86_64-linux/baxter/default.nix b/systems/x86_64-linux/baxter/default.nix
index 5f754c8..834e294 100644
--- a/systems/x86_64-linux/baxter/default.nix
+++ b/systems/x86_64-linux/baxter/default.nix
@@ -68,6 +68,17 @@
     };
   };
 
+  clicks.networking.tailscale = {
+    enable = true;
+    server = "vpn.auxolotl.org";
+    authKeyFile = config.age.secrets."clicks.networking.tailscale.authKeyFile".path;
+  };
+
+  age.secrets."clicks.networking.tailscale.authKeyFile" = {
+    rekeyFile = ./clicks.networking.tailscale.authKeyFile.age;
+    unstableName = true;
+  };
+
   age.secrets."services.ci.master.tokenFile" = {
     rekeyFile = ./services.ci.master.tokenFile.age;
     group = "buildbot";