nixos-config/nixos/configs/pepe/tinc.nix

{ config, lib, pkgs, ... }:

with lib;

{
  module.cluster.services.tinc = {
    "private" = {
      enable = true;
      openPort = true;
      connectTo = [ "sputnik" "robi" ];
    };
    "retiolum" = {
      enable = true;
      openPort = true;
    };
  };

  sops.secrets.tinc_retiolum_ed25519_key = { };
  sops.secrets.tinc_retiolum_rsa_key = { };

  users.users."tinc.retiolum".group = "tinc.retiolum";
  users.groups."tinc.retiolum" = { };
}