From c5290e121dcc09e3a7eec3d4ab0897b682192819 Mon Sep 17 00:00:00 2001
From: uku <hi@uku.moe>
Date: Fri, 7 Mar 2025 17:47:21 +0100
Subject: [PATCH] chore(configs/common): remove tailscale autologin

keys only have 90 days expiry and it's annoying having to rotate them
---
 configs/common.nix              | 10 +---------
 secrets/secrets.nix             |  1 -
 secrets/shared/tailscaleKey.age | 16 ----------------
 3 files changed, 1 insertion(+), 26 deletions(-)
 delete mode 100644 secrets/shared/tailscaleKey.age

diff --git a/configs/common.nix b/configs/common.nix
index 49fcc54..1373f64 100644
--- a/configs/common.nix
+++ b/configs/common.nix
@@ -15,10 +15,7 @@ let
 
   rootPassword = _utils.setupSingleSecret config "rootPassword" { };
   secrets = _utils.setupSharedSecrets config {
-    secrets = [
-      "userPassword"
-      "tailscaleKey"
-    ];
+    secrets = [ "userPassword" ];
   };
 in
 {
@@ -188,11 +185,6 @@ in
     tailscale = {
       enable = true;
       useRoutingFeatures = "both";
-      extraUpFlags = [
-        "--ssh"
-        "--stateful-filtering"
-      ];
-      authKeyFile = secrets.get "tailscaleKey";
     };
   };
 
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 2b398e0..e6e9799 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -17,7 +17,6 @@ let
 in
 {
   "shared/userPassword.age".publicKeys = all;
-  "shared/tailscaleKey.age".publicKeys = all;
   "shared/frpToken.age".publicKeys = all;
   "shared/vmAuthToken.age".publicKeys = all;
 
diff --git a/secrets/shared/tailscaleKey.age b/secrets/shared/tailscaleKey.age
deleted file mode 100644
index 1c143fb..0000000
--- a/secrets/shared/tailscaleKey.age
+++ /dev/null
@@ -1,16 +0,0 @@
------BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1TlI1TGVYQ2ZlaTZ0Ukti
-U0lwenM1ekxDdk0rWi9rc21IeG9XMzFnZlNNClJVeUlkMEVXSE9ZZ2xMblB0MzFB
-TXJldHBIak0vcmgvWHZyc2VYOE10ZzgKLT4gWDI1NTE5IHRpK2FBajgzdURmcGlN
-VkhOWWdydUtvQnQ2M3RNQ0ZSWGdaWEhFRjdXUlEKVTZqK3dRNUpOTHlKRmgxOGV2
-SFRRR0NYNTVrd3JmUGxlR2V0Ni9PTWNncwotPiBYMjU1MTkgMCtQNlNUcXdBNlcv
-aVNtTG1zUVJnTlhROFpPMnFpYnJ2VE1hZUdsK0V4cwp6YjBHM0dxdFNxazQzQ2JB
-UENVdTVhQlZ4UExHeFkxc2NBcnBSamFyMXRrCi0+IFgyNTUxOSBwU0x3OHdZK2M3
-dThsT1RJUXJRT1JwZHBZU2NxTVpZT2YxclUyZ3ErUEVjCldCZm9CTUNVc0VqRjYv
-bXR6NTdxYjRlSFo1c2FXcDBjbFp0RTMrUnNpVFkKLT4gWDI1NTE5IDRDYlYveXFp
-MXRHWDhCT2xYWnp1VG9SeFJoUlBXeVBZMUdSeFoyamhtVlkKd000RGFENDRPcmI4
-MXN6UzZ0NlBjdHhMekE2Y1pleS9KZDUwK1NSZDg3ZwotLS0gakpkcmFXSTFYY3dh
-c3BnNVR6YlNwc0Vhb01tTmJDMXlLNnhMdDNyZmZoZwrs7Ped4A7zJSqVybjIWVMx
-BS8q3idSQVElJMDuyj3u+wPRnk5umxX570vxgljO/McVLvg2/UMFfmG747Ug5jub
-Q/ASEMsQZghPWXQUpfNXSmpfPzg0MNx2dDRyOGnlog==
------END AGE ENCRYPTED FILE-----