Test out tailscaleAuth

Author: stackptr

hosts/spore/services/default.nix

@@ -26,4 +26,5 @@
 
   services.openssh.enable = true;
   services.tailscale.enable = true;
+  services.tailscaleAuth.enable = true;
 }

hosts/spore/services/web/virtual-hosts.nix

@@ -5,6 +5,11 @@
   lib,
   ...
 }: {
+  services.nginx.tailscaleAuth = {
+    enable = true;
+    expectedTailnet = "rove-duck.ts.net";
+    virtualHosts = ["test.zx.dev"];
+  };
   services.nginx.virtualHosts = {
     "rey.foo" = {
       # forceSSL = true;
@@ -60,5 +65,10 @@
       enableAutheliaAuth = true;
       locations."/".proxyPass = "http://127.0.0.1:8082";
     };
+    "test.zx.dev" = {
+      forceSSL = true;
+      useACMEHost = "zx.dev";
+      locations."/".proxyPass = "http://127.0.0.1:3001";
+    };
   };
 }