chore: add tailscale to dex

Signed-off-by: jolheiser <john.olheiser@gmail.com>

.git-age.yaml

@@ -1,4 +1,6 @@
-"apps/gui/firefox/work.nix":
-  - age105cm5awxxegyrqthh4vhnxzr0tdy86q8uq52wkkjacfkutp2vprqwseak7
-"machines/chai/cifs.nix":
-  - age105cm5awxxegyrqthh4vhnxzr0tdy86q8uq52wkkjacfkutp2vprqwseak7
+apps/gui/firefox/work.nix:
+    - age105cm5awxxegyrqthh4vhnxzr0tdy86q8uq52wkkjacfkutp2vprqwseak7
+machines/chai/cifs.nix:
+    - age105cm5awxxegyrqthh4vhnxzr0tdy86q8uq52wkkjacfkutp2vprqwseak7
+machines/dragonwell/dex.nix:
+    - age105cm5awxxegyrqthh4vhnxzr0tdy86q8uq52wkkjacfkutp2vprqwseak7

.gitattributes

@@ -1,3 +1,4 @@
 # Age
 apps/gui/firefox/work.nix filter=git-age diff=git-age
 machines/chai/cifs.nix filter=git-age diff=git-age
+machines/dragonwell/dex.nix filter=git-age diff=git-age

machines/dragonwell/caddy.nix

@@ -11,7 +11,7 @@
             links = [
               {
                 rel = "http://openid.net/specs/connect/1.0/issuer";
-                href = "https://git.jojodev.com/";
+                href = "https://auth.jolheiser.com";
               }
             ];
           }}
@@ -53,6 +53,11 @@
           reverse_proxy localhost:4686
         '';
       };
+      "auth.jolheiser.com" = {
+        extraConfig = ''
+          reverse_proxy localhost:2884
+        '';
+      };
     };
   };
 }

machines/dragonwell/default.nix

@@ -2,7 +2,7 @@ let
   username = "jolheiser";
   key = ''ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfKqCWtDlS3tgvfT6hQN+ii8UtabIZ+ZNmYN+bLwIa8PHOEW5MbfaqXSlhKkSi4+7SfQDCHphw0SMfhsQ4qMEcoywZ+4niDgKlQEVkl+S/VGbLuPe92NRStkyreZBLPr3Rh7ScNlGHcmHmoV9v7725fMnsMmabGVhpGO84PwNHOfJyv2tx2h6LxFbAV8S44UQu2lc8YLWCK2UvKuRnBerBXLnDQThUUX8UuCFzb786gQzD5XDU0MENbByxiy0XdVGAC+tFXEiSIgFZlFbFYyShgdTP9MzX2MOglEi+ae+1UIFncraW7ptUey7qHFJylpHWWWvE+GTwsg2G50i0FvFj jolheiser@jolheiser'';
 in {
-  imports = [./caddy.nix ./golink.nix ./gotosocial.nix ./restic.nix ./ugit.nix ./hardware.nix];
+  imports = [./caddy.nix ./dex.nix ./golink.nix ./gotosocial.nix ./restic.nix ./ugit.nix ./hardware.nix];
 
   boot.tmp.cleanOnBoot = true;
   zramSwap.enable = true;

secrets/personal/dex-tailscale.age

@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 E8j6/g vkz4Nnq6kuBmMTIuShTMHgQl5dE/XNSyNeQ1v8BjSVo
+rQyDr+LjMXcBpKdwmBsWTP4CWn2LkE1gF9C2pDYn8GM
+-> ssh-ed25519 f31uNA 1X5dITPS0gPV9Ty+rIVYdLSfsllIainzsfDekPGZJko
+K511Nbp24wC/yibcMwXzyc03qheEm8CYz0lsP14rRH8
+-> J(DU)G-grease UpDl ^h; ) K
+GfsSxESiw4cjyibN5vt3Hh9tj63kM3oObhfpH+DiBTQQt/2gSkOZ3XGUQI4
+--- P09LRVc2jc0MtLcDfWO3i8tjFVs/Wp5k6pho5C74KLk
+Ý­#©Œ<>ÙQ€Êi%Tò ’f=aYר³=;PÅv¸8]ê·Â<C2B7>‹mµnq8Ån¥é?Í¿ Í9u<12>P#»P

secrets/personal/dex.age

@@ -0,0 +1,10 @@
+age-encryption.org/v1
+-> ssh-ed25519 E8j6/g 0WmXmz2U2bpITKZ2bgPCd3DfK4k4hpKd0u8VxbxeYy0
+FZwkWTfWej2T/gSlY0lfK1sSdVi8S4lrBoESovUpyH0
+-> ssh-ed25519 f31uNA dkC6WYMKZi4Grwuk46cD7jQMJuZ1RVZiyCdTHp16IHo
+KoAfb+KXqpEOc6D09H5RwzGjtPxjXdFI1UTFatk5zQA
+-> kS^C9b-grease F,:|ls xZy d
+B1g4o5732yfNDXuAXMp0Cb4L2wXRrX4NhLmMejaEMVN9vzP48AUTexP/FwfCCOr6
+9pS+SHYRTrCDEdlnpL13sTdmSrn1
+--- ccB91SvSL/KxJW6VlQr5nKiVqnKP54KOZswReVv1/HY
+¤NÃÙw‡á|]Ùò³HQ£•>KLJÕȨÿ—<C3BF>߳ߟ՗³f«OƒµÔ3¶˜z˜ÏE|‰0[ðƒDðÖ3JÊ<4A>T%xQ,–:^Uwf¡?<17>NY±¸ãÿV8µ``jŠìx$1«¹Ò|6$Ý+# Pc

secrets/secrets.nix

@@ -21,4 +21,6 @@ in {
   "personal/restic-env.age".publicKeys = [jolheiser dragonwell];
   "personal/restic-pass.age".publicKeys = [jolheiser dragonwell];
   "personal/restic-repo.age".publicKeys = [jolheiser dragonwell];
+  "personal/dex.age".publicKeys = [jolheiser dragonwell];
+  "personal/dex-tailscale.age".publicKeys = [jolheiser dragonwell];
 }