nixos-config/configs/nixos/plover/terraform/tailscale.tf

data "tailscale_device" "plover" {
  hostname = "plover"
}

resource "tailscale_device_authorization" "plover_authorization" {
  device_id  = data.tailscale_device.plover.id
  authorized = true
  depends_on = [hcloud_server.plover]
}

resource "tailscale_tailnet_key" "plover" {
  reusable            = false
  ephemeral           = false
  preauthorized       = true
  recreate_if_invalid = "always"
  description         = "Plover"
}

resource "tailscale_device_tags" "hcloud_plover" {
  device_id = data.tailscale_device.plover.id
  tags      = ["tag:server"]
}

resource "local_file" "tailscale_auth_key" {
  content  = tailscale_tailnet_key.plover.key
  filename = "${path.module}/plover-tailscale-auth-key"
}