secrets/rekeyed/axol/1ee57cb56c17a905d8f6d68eb574db79-02cace87552ceb629ab03cd084eeae6761008fddebed6b75f9a013d122a25030.age

@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 JMblKQ /KeQPyNmEYg1qHq5M4z3aQ7Jt4dwozMQMhmb1wzdDDw
+kS77B2HAZxnhMzcD9bTkcyhGiRrkzEv6+UDcE0lonJU
+-> BVh{PUl}-grease K D$G T_Ov7Cb
+vmCUTiAi81FTpapoJgHlCO9e6ZXzUW5QfuclIZbG2gqoL6XKSvED84gdZeIeZ3TA
+tSFu/4eADDeqoGKiFQSt/Ji+qy2XDmIVJh400QwcUsjZasRXMquGPn6jDxo
+--- +5WuWL/wQ0EH3xpoQ3f5mLiHZNsXO8wGpsNBh+PfTkA
+ËA©åߘõTfl—àæ×±×ÆZôdW4‰ÝN–æ÷¤$[P#¡Z‚ÜÔÜ<18>×þƒÃ’æ£A¥ÙFÃr•bïd<C3AF>-`,@ÕµóÈÐäÕ

secrets/rekeyed/baxter/5b9aeed25aabf9b5f06ec083278ad21c-02cace87552ceb629ab03cd084eeae6761008fddebed6b75f9a013d122a25030.age

@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 Z9MeFA 2SrMV2OMZdsZPSaxzxfgQF2ukrzRme+Vt4eAcT7dkAs
+QpHJD8cT6DMR1FP1ft57hRCYjZW6aw16cEv61mBqADg
+-> v.`66g}-grease CAkD Ap<g
+BQxsewykSzbTiU+pZmYdy4b0E2I225h0XVUFQ3mMMxHKTznsJhdon86DByrlPIK5
+S6W2AJ/wMHauk8EzHBTWsTiZnvmAk04OpLjxlgfl
+--- xQos1NCssn+gCQMs3fdLeOxgOeLRvsYZlCW9cYRsGFs
+/7}¨rÈÏÞÈ …ŠÄûk(-–N(®ßˆÄÿPfún†¸E›<45>3fLídɆ{Az‚B³ÒÿyS
F³­Œ”8X¹©¨Ty´Ó8
¾9°Puèá

systems/x86_64-linux/axol/default.nix

@@ -57,6 +57,12 @@
     database_password_path = config.age.secrets."clicks.services.headscale.database_password_path".path;
   };
 
+  clicks.networking.tailscale = {
+    enable = true;
+    server = "vpn.auxolotl.org";
+    authKeyFile = config.age.secrets."clicks.networking.tailscale.authKeyFile".path;
+  };
+
   age.secrets."clicks.services.headscale.database_password_path" = {
     generator.script = "alnum";
     group = "headscale";
@@ -64,5 +70,10 @@
     unstableName = true; # Clicks option to base the name on a hash of the contents ... helps with autorestarting services
   };
 
+  age.secrets."clicks.networking.tailscale.authKeyFile" = {
+    rekeyFile = ./clicks.networking.tailscale.authKeyFile.age;
+    unstableName = true;
+  };
+
   system.stateVersion = "23.11";
 }

systems/x86_64-linux/baxter/default.nix

@@ -68,6 +68,17 @@
     };
   };
 
+  clicks.networking.tailscale = {
+    enable = true;
+    server = "vpn.auxolotl.org";
+    authKeyFile = config.age.secrets."clicks.networking.tailscale.authKeyFile".path;
+  };
+
+  age.secrets."clicks.networking.tailscale.authKeyFile" = {
+    rekeyFile = ./clicks.networking.tailscale.authKeyFile.age;
+    unstableName = true;
+  };
+
   age.secrets."services.ci.master.tokenFile" = {
     rekeyFile = ./services.ci.master.tokenFile.age;
     group = "buildbot";