diff options
| author | seth <[email protected]> | 2024-10-18 03:10:35 -0400 |
|---|---|---|
| committer | GitHub <[email protected]> | 2024-10-18 07:10:35 +0000 |
| commit | e6f79b30e620cf7bd5b06e2579e979ff090e925a (patch) | |
| tree | 1dd2b20126602ef448f77fbb9cdd44ba7f02a58c /ext/terranix/tailscale | |
| parent | fdaf8680ef5bbcadb7cece43911beff18f90cdb2 (diff) | |
more refactors & outsource some things (#477)
* tree-wide: drop flake-parts
* drop nixinate
* justfile: cleanup
* drop treefmt-nix
* doc: update READMEs
* flake: cleanup
* seth: don't use `./.`
* modules/nixos,darwin: bundle all modules
They all depend on each other anyways so
* systems: manually import internal modules
* seth: use riff module from nix-exprs
* flake: back to flake-parts
* Revert "flake: back to flake-parts"
This reverts commit 35334882f7c0c23991a4efd65ea08b216006b2b0.
Saving the last commit so I can go back if I want
* flake: use lib.const
this looks better...right?
* flake: declare systems like a normal person
Diffstat (limited to 'ext/terranix/tailscale')
| -rw-r--r-- | ext/terranix/tailscale/acl.nix | 51 | ||||
| -rw-r--r-- | ext/terranix/tailscale/default.nix | 13 | ||||
| -rw-r--r-- | ext/terranix/tailscale/devices.nix | 20 | ||||
| -rw-r--r-- | ext/terranix/tailscale/dns.nix | 5 | ||||
| -rw-r--r-- | ext/terranix/tailscale/tags.nix | 21 |
5 files changed, 0 insertions, 110 deletions
diff --git a/ext/terranix/tailscale/acl.nix b/ext/terranix/tailscale/acl.nix deleted file mode 100644 index 80e3537..0000000 --- a/ext/terranix/tailscale/acl.nix +++ /dev/null @@ -1,51 +0,0 @@ -{ lib, ... }: -{ - resource.tailscale_acl.default = { - acl = toString ( - builtins.toJSON { - tagOwners = - let - me = [ "getchoo@github" ]; - tags = map (name: "tag:${name}") [ - "server" - "personal" - ]; - in - lib.genAttrs tags (_: me); - - acls = - let - mkAcl = action: src: dst: { inherit action src dst; }; - in - [ - (mkAcl "accept" [ "tag:personal" ] [ "*:*" ]) - (mkAcl "accept" [ "tag:server" ] [ "tag:server:*" ]) - ]; - - ssh = - let - mkSshAcl = action: src: dst: users: { - inherit - action - src - dst - users - ; - }; - in - [ - (mkSshAcl "accept" [ "tag:personal" ] - [ - "tag:server" - "tag:personal" - ] - [ - "autogroup:nonroot" - "root" - ] - ) - ]; - } - ); - }; -} diff --git a/ext/terranix/tailscale/default.nix b/ext/terranix/tailscale/default.nix deleted file mode 100644 index b370b34..0000000 --- a/ext/terranix/tailscale/default.nix +++ /dev/null @@ -1,13 +0,0 @@ -{ lib, ... }: -{ - imports = [ - ./acl.nix - ./devices.nix - ./dns.nix - ./tags.nix - ]; - - provider.tailscale = { - tailnet = lib.tfRef "var.tailnet"; - }; -} diff --git a/ext/terranix/tailscale/devices.nix b/ext/terranix/tailscale/devices.nix deleted file mode 100644 index 625c56e..0000000 --- a/ext/terranix/tailscale/devices.nix +++ /dev/null @@ -1,20 +0,0 @@ -{ lib, ... }: -{ - data.tailscale_device = - let - toDevices = - devices: - lib.genAttrs devices (name: { - name = "${name}.tailc59d6.ts.net"; - wait_for = "60s"; - }); - in - toDevices [ - "atlas" - "caroline" - "glados" - "glados-wsl" - "glados-windows" - "iphone-14" - ]; -} diff --git a/ext/terranix/tailscale/dns.nix b/ext/terranix/tailscale/dns.nix deleted file mode 100644 index 320a24b..0000000 --- a/ext/terranix/tailscale/dns.nix +++ /dev/null @@ -1,5 +0,0 @@ -{ - resource.tailscale_dns_preferences.default = { - magic_dns = true; - }; -} diff --git a/ext/terranix/tailscale/tags.nix b/ext/terranix/tailscale/tags.nix deleted file mode 100644 index 3e82dbb..0000000 --- a/ext/terranix/tailscale/tags.nix +++ /dev/null @@ -1,21 +0,0 @@ -{ lib, ... }: -{ - resource.tailscale_device_tags = - let - getDeviceID = device: lib.tfRef "data.tailscale_device.${device}.id"; - toTags = n: v: { device_id = getDeviceID n; } // v; - - tags = lib.genAttrs [ - "server" - "personal" - ] (n: [ "tag:${n}" ]); - in - builtins.mapAttrs toTags { - atlas.tags = tags.server; - caroline.tags = tags.personal; - glados.tags = tags.personal; - glados-wsl.tags = tags.personal; - glados-windows.tags = tags.personal; - iphone-14.tags = tags.personal; - }; -} |
